Developers

Verify a program

Attach your source repository to a deployed program. The upgrade authority signs the claim with a wallet.

How it works

Build your program reproducibly and get its hash: solana-verify build then solana-verify get-executable-hash target/deploy/<name>.so.
Enter the program address, repository, commit and that hash below. The explorer shows the hash currently on-chain for comparison.
Connect the wallet that holds the program's upgrade authority and sign. The signature never leaves your browser except as the submitted proof.

Program address

Repository URL (https)

Commit (40-character SHA)

Build arguments (optional)

Hash from your reproducible build (sha256, hex)

Wallet holding the upgrade authority

No wallet that can sign messages was found in this browser. Install or unlock one, then reload.

You sign a plain-text message naming the program, hash, repository and commit. Nothing is sent on-chain and no fee is charged.