# MetaMask Card Baanx Withdraw Program security audit

MetaMask Card's Baanx Withdraw program is an Anchor program on Solana that lets an authorized operator withdraw tokens to a beneficiary and distribute treasury funds via signed multi-send, supporting SPL Token and Token-2022.

Codezen audited MetaMask Card Baanx Withdraw Program together with Oak Security. Technologies in scope: Solana, Rust and Anchor. We reported 17 findings: 1 major, 9 minor and 7 informational.

- Audit type: Solana program audit
- Technologies: Solana, Rust, Anchor
- Ecosystem: Solana
- Delivered with: Oak Security
- Report date: 20 June 2025
- Full report (PDF): https://github.com/oak-security/audit-reports/blob/main/MetaMask%20Card/2025-06-20%20Audit%20Report%20-%20MetaMask%20Card%20Baanx%20Withdraw%20Program%20v1.0.pdf
- Page: https://www.codezen.tech/audits/metamask-card-baanx-withdraw-program/

## Findings by severity

| Severity | Count |
| --- | --- |
| Critical | 0 |
| Major | 1 |
| Minor | 9 |
| Info | 7 |
| Total | 17 |

Need a similar audit? Email info@codezen.tech or visit https://www.codezen.tech/.