Audits

All audits are hosted at https://github.com/solana-labs/security-audits#token-2022.

Verification

This build provided on the release uses solana-verifiable-build.

You can verify it by checking out the repo at this commit https://github.com/solana-labs/solana-program-library/commit/070934ae4f2975d602caa6bd1e88b2c010e4cab5 (which does not contain an updated security.txt) and running:

$ solana-verify build --library-name spl_token_2022 -- --no-default-features

The --no-default-features flag ensures that the unsupported zero-knowledge proof functionality is omitted. Once the program is built, it's possible to verify it by running:

$ solana-verify get-executable-hash target/deploy/spl_token_2022.so
0efb0df034912c9147af345e4b05a37e2f39d71dd10c16cd3de873c81257fff8

Highlights for this deployment

• The token group interface is available for use
• Lower CU usage for all instructions, up to a 60% decrease

What's new since v5.0.1

• Publish token-2022 v5.0.2 by @github-actions[bot]
• Publish transfer-hook-interface v0.8.2 by @github-actions[bot]
• Publish token-group-interface v0.4.2 by @github-actions[bot]
• Publish token-metadata-interface v0.5.1 by @github-actions[bot]
• Publish tlv-account-resolution v0.8.1 by @github-actions[bot]
• Publish type-length-value v0.6.0 (#7233) by @joncinque