codex

Colosseum Codex: Alpenglow Activation, Solana Book, Ledger Atom

Alpenglow Activation on Oct 21, Building Financial Software on Solana book, Ledger Atom

It's a big week ahead for Solana. Alpenglow goes live on mainnet and replaces TowerBFT, the consensus mechanism the network has run since launch! The Ledger Atom integration puts the Seeker app and the Solana dApp Store's 1,500+ apps in front of Ledger's customers, but the announcement comes just days after Ledger confirmed an unauthorized hardware exploit in devices sold through a Southeast Asia reseller.

🔥 Alpenglow Activation

Anza has scheduled Alpenglow to go live on Solana mainnet-beta on Wednesday, October 21 at the start of epoch 1064.

During the switch from TowerBFT to Votor, the cluster keeps running TowerBFT for the first 5,000 slots of the epoch, roughly 18 minutes. After that, blocks stop carrying user transactions and carry only votes.

Once validators holding 82% of stake sign off, they form an Alpenglow genesis certificate, roll back the vote-only blocks, and resume user transactions under Votor. If the certificate doesn't form right away, validators keep producing vote-only blocks and resend their votes until it does.

Validators need a client built on Agave 4.3, which covers Agave, Jito-Solana, and Harmonic Salsa. Firedancer and Frankendancer aren't supported for the migration.

Votes move off-chain, so per-vote fees (about 1.1 SOL a day) give way to a 0.8 SOL fee charged once per epoch from the vote account. A validator whose vote account can't cover it sits out the next epoch.

Once Votor is running, finality drops from about 12.8 seconds to a 150ms target, and fault tolerance rises from 33% to 40% of stake. Vote transactions also leave blocks. That frees block space, and reported transaction counts and TPS will drop sharply, so dashboards baselined on vote traffic will need resetting.

For developers, the confirmed and finalized commitment levels converge. The migration checklist says to move to finalized after activation, not before, and confirmed gets removed in a later release. Geyser and gRPC consumers need to buffer per bank, and tick entries disappear from shreds.

Alpenglow

📘 Solana Book

Quicknode published Building Financial Software on Solana, a free book by Mike MacCana that walks through ten onchain finance programs:

Escrow
Fundraiser
Betting market
Managed fund
Order book exchange
Automated market maker (AMM)
Options exchange
Proprietary AMM
Lending and borrowing
Perpetual futures

The book also covers how onchain money gets stolen, including account recreation attacks and direct deposits that distort other users' shares.

The companion code lives in the solana-program-examples repo, written in Anchor 1, Anchor 2, and Quasar. Each finance program has LiteSVM tests and Kani model checks that prove its arithmetic holds across a declared range of inputs.

Quicknode's Solana Finance plugin is the book's MIT-licensed companion for Claude Code. It gives Claude a skill for writing finance programs in Anchor 1, Anchor 2, or Quasar, with LiteSVM for testing.

Building Financial Software on Solana

📱 Ledger Atom

Solana Mobile named Ledger as its first hardware expansion partner, and Ledger's new Atom device will ship with the Seeker app preinstalled.

Ledger revealed Atom at Ledger Op3n 2026 in Paris as a security and privacy device that runs a hardened Android Open Source Project build alongside Ledger OS on an EAL6+ certified Secure Element.

The Seeker app combines the Solana dApp Store and wallet and sits on Atom's home screen. Transaction signing and approvals run in Atom's Secure Mode, which is physically isolated from Android. The 1,500+ apps in the dApp Store are expected to come to Atom, so a single dApp Store submission will reach both Seeker and Atom owners.

Reservations are open on Ledger's site, the only place Atom will be sold, with shipping planned for summer 2027. Ledger hasn't published a price. Specs include a 6.8-inch AMOLED display, a 4,000mAh battery, and a physical privacy switch.

Solana Mobile Announces Ledger as its First Hardware Expansion Partner

⭐ Highlights

Compiling Solana Programs with Upstream Rust and LLVM - @clairefxyz
Claire shows how to build Solana programs on nightly upstream Rust and LLVM with sbpf-linker.

The magic world of Pull Payments - @L0STE_
How card-style payment mandates work and Blueshift's pull program, which lets a mandate require tokens back in the same instruction for swaps and limit orders.

Durable Nonce Deprecation - Solana
Durable nonces will be removed about six months after a replacement offline signer program is ready, with Anza's Programmatic Signer and Blueshift's Vector in development.

Breaking open a propAMM - OtterSec
OtterSec decompiled the closed-source GoonFi V2 propAMM into Rust that rebuilds to the identical onchain binary and in the decompiled code found a bug that was responsibly disclosed.

⚡ Quick Hits

Compiling a Solana program with upstream Rust instead o Anza's Fork - Gabriel Koerich

MagicBlock Validator v1.0 is here - MagicBlock

Grass Launches Contents API, a Live Web Retrieval Tool for AI Agents - Solana Compass

Solana Q3 Token Holder Report - @Blockworks

Solana Changelog: October 16 - @solana_devs

Pyth Pro MCP Server 1.1 is live - @PythNetwork

Want early access to the latest products launching from Colosseum?

We're looking for alpha testers to be among the first to try what we're building!

Apply Now

⚙️ Tools & Resources

A Solana wallet CLI with an encrypted local vault
Your Solana CLI keypairs sit on disk as plaintext JSON files. solx keeps keys and recovery phrases in one Argon2id-protected, AES-256-GCM-SIV vault and handles SOL transfers, token transfers, and closing ATAs from the terminal.

A GitHub Action for verified Squads program upgrades
Your multisig members approve program upgrades with no easy way to confirm the buffer matches your repo's code. MagicBlock's action proposes the upgrade from CI with a verifiable build, simulates it first, and lands the upgrade and its otter-verify record in one execution.

Docker tests for a proposed change to how cargo-build-sbf installs
If you've installed cargo-build-sbf through both cargo and the Solana CLI, Agave PR #15415 changes your setup by making the CLI's copy a symlink to the one in ~/.cargo/bin. This repo runs three install orders in clean Docker containers against that PR and builds an Anchor program at the end of each.