Solana moves to scrap the transaction feature used in the $270 million Drift hack
- Published
- Updated
Solana developers proposed removing durable nonces, the transaction feature tied to the April Drift Protocol hack that was reported at $270 million. The proposal also raises questions for exchanges and institutional custodians that rely on offline approvals, while a related Crypto Briefing report says the change could affect existing workflows and confidence in Solana.
Key claims & sources
What it means
Durable nonces let Solana users sign a transaction offline and submit it later, working around the network's short-lived blockhash system that normally expires unsigned transactions within roughly a minute or two. Custodians and exchanges adopted the feature to support cold-storage approval flows. In April, attackers exploited durable nonces in the Drift Protocol hack, draining funds valued at $270 million, exposing the same offline-signing mechanism that institutions had come to depend on.
Exchanges and institutional custodians that built cold-storage or multi-signature approval processes around durable nonces will need to redesign those workflows if the feature is retired. Teams relying on delayed or offline transaction signing lose a tool many treated as standard infrastructure, forcing a shift toward real-time signing or alternative nonce mechanisms. Developers gain a narrower attack surface, but custodial operations teams inherit the cost of migration and re-testing before any removal takes effect. (per cryptobriefing.com)
Removing a feature because it was weaponized in a $270 million theft is a defensible security response, but it also shows how a convenience built for institutional compliance became a liability for the whole network. Solana's claim to serve enterprise-grade custody now runs against the reality that one exploited mechanism can force a protocol-wide redesign. The episode asks whether features added to court institutional adoption can be removed without reopening the same trust gap they were meant to close.
The outcome hinges on whether Solana's developer proposal to retire durable nonces advances through the network's formal review and gains validator support, since nothing has been finalized yet. Exchanges and custodians building on the feature will be watching for a concrete removal timeline or migration path. Adoption would confirm security concerns outweighed institutional convenience; stalling or dilution of the proposal would leave the exploited mechanism active while confidence questions persist.
Market reaction i
Solana fell 0.3% in the 4 hours after the first headline, after falling 1.2% in the 2 hours before.
47 prices, one every 30 minutes · The move was larger before the first headline than after: an observation, not an explanation. The market also moves on things nobody publishes.
Coverage timeline
Every piece in order, with the time its news medium declares — if it is not believable we use ours and say so — and what it added to what was already known at that point. Arriving first is not the same as adding something.
Has this happened before?
| When | What happened | Figure |
|---|---|---|
| 6 days ago | Anza Urges Solana Validators to Upgrade Agave Before Epoch 1079 event | 1 actors in common · 4 news media |
| 8 days ago | Solflare enters ‘bunker mode’ after crypto attacks, restricts code access event | 1 actors in common · 2 news media |
| 10 days ago | Anza Urges Solana Validators to Act on Critical Linux Flaw event | 1 actors in common · 5 news media |
| 10 days ago | Solana Mobile Says Fake 'SKR Claim' App Reached Store Spotlight event | 1 actors in common · 3 news media |
| 13 days ago | Solana (SOL) Funding Delays event | 1 actors in common · 2 news media |