Wallet API, Contributors, Security, Architecture.
VisualSign now decodes Drift Protocol instructions. Like every Solana preset, it ships as a self-contained directory under
src/chain_parsers/visualsign-solana/src/presets/ with no changes to existing decoders. See Adding a Solana preset.A round of safety fixes on the Solana path: caller-supplied IDL overrides are rejected for trusted programs and validated against the signer allowlist, V0 transactions referencing unresolved address-lookup-table entries are rejected instead of mis-decoded,
swig_wallet inner-instruction recursion is depth-bounded, and Token-2022 mints with more than 18 decimals are rejected while format_token_amount gained overflow hardening.VisualSign now decodes Jupiter (Borrow, Earn, Perpetuals, v6 route_v2), Kamino (Borrow, Vault, Farms, Limit Orders), Meteora (DLMM, DAMM V2), MetaDAO (Futarchy, Conditional Vault), Orca Whirlpool, Onre App, Neutral Trade, DFlow Aggregator, and Exponent Finance.None of these additions required changes to existing decoders or to the core parser. Each preset is a self-contained directory under
src/chain_parsers/visualsign-solana/src/presets/, auto-registered by build.rs. See Composable by design: how Solana presets stack for the architecture, and Adding a Solana preset for the how-to.The built-in Solana IDL parser path is now fuzz-tested against real mainnet state via Surfpool. Tests run against a local mainnet fork backed by live RPC, so they catch drift between IDL assumptions and on-chain reality without broadcasting to a live cluster.