# Solana foot-guns Anchor does not remove > Anchor removes the boilerplate, not the sharp edges. The bugs that lose money are the ones the framework politely lets you write. Solana's account model is genuinely different: programs are stateless, accounts carry the state, and the runtime trusts you to check who owns what. These are the checks that keep ending up in post-mortems. ## Owner checks are your job Deserialising an account proves its shape, not its owner. Any program can create an account with an identical layout and hand it to yours. Anchor's owner constraint exists for exactly this; Account does it implicitly, AccountInfo does not. ## Signers are not implied A field that says admin is data, not a signature. Every privileged instruction needs a Signer on the authority account — the common audit failure is an authority read from the account's data with nothing checking the signature against it. ## Rent, realloc and the account that grew Reallocating an account changes its lamport balance requirement, and failing to top up rent on realloc is a silent outage for your own users. Size accounts for the data they will actually hold on first write. ## What to take away - Check the owner, not just the shape. - Privileged calls need a Signer constraint, not an admin field. - Budget rent when you realloc, not after. - Fuzz instruction sequences — state bugs hide between calls. ## Tags Solana, Anchor, Rust, Auditing ## We build this for clients https://dfieldsolutions.com/en/services/blockchain ## More from the lab - https://dfieldsolutions.com/en/lab/solana-rpc-costs.md — What Solana RPC actually costs once the prototype works - https://dfieldsolutions.com/en/lab/custom-software-cost.md — What custom software actually costs - https://dfieldsolutions.com/en/lab/custom-vs-off-the-shelf.md — Custom software or off the shelf — the honest test - https://dfieldsolutions.com/en/lab/n8n-self-hosted-vs-zapier.md — Self-hosted n8n or Zapier — where the bill actually differs --- Source: https://dfieldsolutions.com/en/lab/solana-anchor-footguns DField Solutions — Dunakeszi, Hungary — dezso@dfieldsolutions.com Booking: see https://dfieldsolutions.com/en/contact