BLOCKCHAIN DEVELOPMENT · SOLANA

Solana development company: Rust programs, SPL tokens and RWA tokenization

We build Rust programs with Anchor, design tokens with Token Extensions and prepare real-world asset tokenization on Solana. It is a public blockchain with its own model, different from Ethereum's EVM, so it pays to choose it knowing what changes, which controls it gives the issuer and what risks it carries.

RUSTANCHORSPLTOKEN EXTENSIONSRWA

Tell us about your project See all services

WHO WE ARE

At Unknown Gravity, we're not just blockchain developers. We are passionate about blockchain technology.

ARCHITECTURE

How Solana programs work: accounts, Rust and Anchor

On Solana, smart contracts are called programs, and code is kept apart from data. That split changes how everything else is designed.

Accounts

All network state lives in accounts. The network is a key-value store: the key is a 32-byte address and the value is an account. Each account holds up to 10 MiB of data and requires a refundable deposit proportional to its size.

Stateless programs

A program stores no data of its own: it reads and writes the accounts passed to it in each instruction. Programs compile to sBPF bytecode, and the Sealevel runtime executes them in parallel.

Anchor, Pinocchio or native Rust

These are the three official ways to write programs. Anchor is the reference development framework for building secure programs.

Upgradeable or immutable

A program can be upgraded as long as an upgrade authority exists. If the authority is revoked, the code becomes immutable. It is a governance decision best made before the audit.

Atomic transactions

All instructions in a transaction succeed or revert together, and the fee is charged even if the transaction fails. The base fee is 5,000 lamports per signature.

THE NETWORK

Solana or an EVM chain? How we choose

Solana is not EVM-compatible. A Solidity contract cannot be deployed as is: the official migration guide recommends a full rewrite in Rust for most projects.

State lives outside the program

On Ethereum the contract stores its own state; on Solana it does not. Porting a contract means redesigning the data model, not translating lines.

There is no msg.sender

Every authority must sign or be a validated PDA (program derived address). The official migration guide lists it in its security checklist.

Different keys and signatures

Solana signs with Ed25519, not secp256k1 like Ethereum, so EVM keys and addresses do not work directly.

Fewer paths for Solidity

Solang compiles some Solidity to BPF. Neon EVM, the other path, ended development and support on October 1, 2026 and asks users to migrate or withdraw before December 31, 2026, so it is not an option for a new project.

Reentrancy and fees

Solana's runtime blocks indirect reentrancy, which EVM developers must guard against by hand. And because execution is parallel, fees form in local markets per account.

Bridges to other chains

Circle's CCTP moves native USDC between Solana and other chains, with no wrapped token. BUIDL uses Wormhole to move shares across chains.

If you already have audited Solidity contracts and your ecosystem lives on EVM chains, staying on EVM saves you a rewrite and a new audit. If you are starting from scratch and need issuer controls built into the token, Token Extensions provides them without deploying your own token contract.

USE CASES

Solana development services

We work for companies, asset managers and issuers of real-world assets. The goal is an asset that meets its regulation, not a speculative token.

Rust programs

Custom programs with Anchor or native Rust: issuance logic, holder registers, yield distribution and transfer rules.

SPL and Token-2022 tokens

We choose the token program and the extensions each case needs: allowlists, accounts that start frozen, pausing or confidential balances.

Real-world asset tokenization

Funds, debt, shares or real estate represented as tokens, with the controls required by the rules that apply to the asset.

dApps and wallet integration

Investor portals and issuer dashboards connected to Solana-compatible wallets. MetaMask has supported Solana accounts natively since July 2025.

Migration from EVM chains

We rewrite your Solidity contract logic in Rust and redesign the data model for Solana's account system.

Security audits

We review the security of our own or third-party programs and use verified builds to check that the deployed binary matches the audited code.

BENEFITS AND CHALLENGES

Building on Solana: strengths and risks

Solana has clear strengths for regulated issuance, and risks worth putting in writing before you choose it.

BENEFITS

Issuer controls in the token standard itself: allowlists, default frozen accounts, pausing and a permanent delegate
Active institutional issuers: BUIDL, SWEEP, EURC and the Galaxy commercial paper arranged by J.P. Morgan
200 ms slots since October 9, 2026 and a base fee of 5,000 lamports per signature
Parallel execution, with fees set per account rather than in one global market
Verifiable binaries: verified builds prove the deployed program matches the published source code

CHALLENGES

Mainnet outages: 17 hours in September 2021, several halts in 2022, a severe degradation in February 2023 and about 5 hours in February 2024; the official status page lists no later incidents (checked October 16, 2026)
Concentration: 18 validators hold more than one third of active stake, based on public network data as of October 16, 2026
Low client diversity: as of October 16, 2026, about 87% of stake reported Agave-family clients, and the Alpenglow migration does not support Firedancer or Frankendancer
Consensus change to Alpenglow (scheduled to activate on October 21, 2026), a breaking change that requires indexing changes
Critical vulnerabilities reported in December 2025 that could have stalled consensus, since patched (Anza summary, January 2026); there was no known attack
Upgradeable programs: unless the authority is revoked, the code can change after the audit

TECH STACK

Creating an SPL token: Token Program vs Token-2022 extensions

On Solana a token is not a new contract: it is a mint account of the token program that is already deployed. There are two official token programs, the original one and Token Extensions (Token-2022), which adds optional features. These are the ones that matter most for a tokenized security.

Transfer HookRuns a custom program on every transfer, for example to accept only recipients on a post-KYC allowlist. The called program receives the accounts as read-only.
Default Account StateNew accounts start frozen and can only be used once the issuer thaws them. It fits enabling each investor after verification.
Permanent DelegateAn authority that can transfer or burn tokens from any account, and that holders cannot revoke. In a regulated issuance it can be used, for example, to enforce a court order or correct an error.
PausablePauses transfers, minting and burning for the whole token.
Confidential BalancesHides amounts and balances, but for now not addresses, and supports an auditor key. It can only be enabled on new tokens.
Scaled UI Amount and Interest-BearingThey adjust the amount shown: an updatable multiplier designed for stock splits or dividends, or an annual interest rate stored on the mint that adds no tokens.

Not every extension can be combined with every other, so the token design is settled before writing code. Permanent Delegate, Pausable and Default Account State give the issuer control over third-party balances: a compliance feature, but also a risk for investors that must be disclosed in the offering documents.

PROCESS

Process and security audits

01 /

Regulatory and chain fit

We assess whether the token is a security, an EMT or another crypto-asset, and whether Solana fits your case better than an EVM chain.

02 /

Token design

We choose the token program and extensions, check that they are compatible with each other and document the issuer's powers.

03 /

Development and testing

Rust programs with Anchor, testing on devnet and testnet, and integration of wallets and indexing services.

04 /

Audit

Security review of the code and a verifiable build, so anyone can check that the deployed binary is the audited one.

05 /

Deployment and governance

Mainnet deployment and a decision on the upgrade authority: who holds it or whether it is revoked.

REGULATED TOKENIZATION

Tokenizing real-world assets on Solana

According to rwa.xyz, as of October 16, 2026 Solana holds $4.39 billion in tokenized real-world assets that can move between wallets, excluding stablecoins, and $15.02 billion in stablecoins. These are some issuers with their own announcements.

Funds

BlackRock and Securitize launched a BUIDL share class on Solana in March 2025. State Street and Galaxy launched their tokenized liquidity fund SWEEP on Solana in May 2026.

Debt

In December 2025 J.P. Morgan arranged a U.S. commercial paper issuance for Galaxy on Solana, with issuance and redemption proceeds paid in USDC.

Equities

Ondo Global Markets came to Solana in January 2026 with more than 200 tokenized stocks and ETFs. In July 2026, on its listing day, Securitize announced that its own stock, SECZ, would launch in tokenized form on Avalanche and Solana.

Euro stablecoins

Circle's EURC has been on Solana since December 2023, and Société Générale-FORGE's EURCV is listed as available. Both issuers appear in the ESMA register as issuers of e-money tokens (EMTs).

Regulation follows the asset, not the chain

In the EU, MiCA is technology-neutral, and Spain's Law 6/2023 allows securities to be represented on distributed ledgers without naming any network. If the token is a security, MiCA does not apply: MiFID II and Law 6/2023 do, with an ERIR keeping the register. If it is an e-money token (EMT), the issuer must be a credit institution or an e-money institution.

GUIDES

Solana development guides

FAQ

Frequently asked questions

Can I bring my Solidity contract to Solana?

Not as is. Solana does not run the EVM: its programs compile to sBPF and follow a different data model. The official migration guide recommends a full rewrite in Rust for most projects. Solang compiles some Solidity, and Neon EVM ended development and support on October 1, 2026. The usual path is to rewrite the logic in Rust and audit it again.

Can securities be tokenized on Solana in line with Spain's Law 6/2023?

Law 6/2023 allows transferable securities to be represented on distributed ledgers and does not name any network. The asset sets the regime: a tokenized security falls outside MiCA and under MiFID II and Law 6/2023, with an ERIR responsible for the register. Token Extensions provides technical controls (allowlists, default frozen accounts and a permanent delegate), but deploying on Solana is not enough to comply with the law: the issuer must appoint the ERIR in the issuance document (Article 8.4).

How does the Alpenglow consensus change affect my project?

Alpenglow, Solana's new consensus, was scheduled to activate on mainnet on October 21, 2026 (epoch 1064). The official upgrade page flags it as a breaking change that requires indexing changes. It is worth reviewing indexers, monitoring and any logic that depends on confirmation times, and checking the activation status on the official upgrade page before taking an issuance to production.

Is Solana reliable enough for a regulated asset?

It has a record of outages: 17 hours in September 2021 and the latest halt, of about 5 hours, in February 2024. Since then, the official status page lists no mainnet incidents (checked October 16, 2026). In December 2025 critical vulnerabilities that could have stalled consensus were reported; Anza's January 2026 summary says they were patched, with no known attack. These risks belong in the offering documents.

Can I issue a euro stablecoin on Solana?

The network allows it; the rules set conditions for the issuer. Under MiCA, to issue an e-money token (EMT) and offer it in the EU, the issuer must be authorized as a credit institution or an e-money institution (Article 48). Circle, which issues EURC on Solana, appears in the ESMA register as an e-money institution. Note that ESMA warns that no authority has reviewed the white papers in that register.

How do I check that the deployed program is the audited one?

With two checks. A verified build shows that the deployed binary matches the published source code. And you need to look at the upgrade authority: while it exists, the program can change after the audit; if it is revoked, the code becomes immutable. Both should be part of any due diligence on an issuance on Solana.

SOURCES