Solana moves to scrap transaction feature exploited in $270 million Drift hack

A draft proposal, SIMD-0723 filed Nov. 5 by Gabe Rodriguez of Anza, would retire Solana's durable nonces, which keep signed transactions valid indefinitely. Removal would not take effect before May 5, 2027, and Solana Foundation migration requirements could delay it further; the proposal still needs technical approval. Durable nonces let attackers hold pre-signed approvals for over a week before draining at least $270 million from Drift on April 1. Drift blamed a North Korean state-affiliated group. Custodians using offline signing would need alternatives, which carry risks such as authorizations remaining valid after failed transactions.

✨ AI summary of the linked source — not editorial content.

Explore the topic

• Hacks
• SOL
• Solana