Solana moves to scrap the transaction feature used in the $270 million Drift hack

27Importance
closedStatus
3News media
Published
Updated

Solana developers proposed removing durable nonces, the transaction feature tied to the April Drift Protocol hack that was reported at $270 million. The proposal also raises questions for exchanges and institutional custodians that rely on offline approvals, while a related Crypto Briefing report says the change could affect existing workflows and confidence in Solana.

Key claims & sources

✓
Solana moved to scrap the transaction feature used in the $270 million Drift hack.
✓
Crypto Briefing said the durable nonce proposal could improve security but may disrupt existing workflows and affect institutional confidence in Solana.
✓
Solana developers proposed removing durable nonces, the transaction feature used in the April Drift Protocol hack.
✓
The proposal would change how Solana handles offline approvals, with implications for exchanges and institutional custodians.

What it means

Durable nonces let Solana users sign a transaction offline and submit it later, working around the network's short-lived blockhash system that normally expires unsigned transactions within roughly a minute or two. Custodians and exchanges adopted the feature to support cold-storage approval flows. In April, attackers exploited durable nonces in the Drift Protocol hack, draining funds valued at $270 million, exposing the same offline-signing mechanism that institutions had come to depend on.

Exchanges and institutional custodians that built cold-storage or multi-signature approval processes around durable nonces will need to redesign those workflows if the feature is retired. Teams relying on delayed or offline transaction signing lose a tool many treated as standard infrastructure, forcing a shift toward real-time signing or alternative nonce mechanisms. Developers gain a narrower attack surface, but custodial operations teams inherit the cost of migration and re-testing before any removal takes effect. (per cryptobriefing.com)

Removing a feature because it was weaponized in a $270 million theft is a defensible security response, but it also shows how a convenience built for institutional compliance became a liability for the whole network. Solana's claim to serve enterprise-grade custody now runs against the reality that one exploited mechanism can force a protocol-wide redesign. The episode asks whether features added to court institutional adoption can be removed without reopening the same trust gap they were meant to close.

The outcome hinges on whether Solana's developer proposal to retire durable nonces advances through the network's formal review and gains validator support, since nothing has been finalized yet. Exchanges and custodians building on the feature will be watching for a concrete removal timeline or migration path. Adoption would confirm security concerns outweighed institutional convenience; stalling or dilution of the proposal would leave the exploited mechanism active while confidence questions persist.

Market reaction i

SolanaSOL it is the asset of the company or protocol in the event

Solana fell 0.3% in the 4 hours after the first headline, after falling 1.2% in the 2 hours before.

$86.24 price at the headline
-1.2% 2 h before
-0.3% 4 h after
+0.2% 12 h after
First headline

47 prices, one every 30 minutes · The move was larger before the first headline than after: an observation, not an explanation. The market also moves on things nobody publishes.

Coverage timeline

Every piece in order, with the time its news medium declares — if it is not believable we use ours and say so — and what it added to what was already known at that point. Arriving first is not the same as adding something.

first
Nov 9 06:36
+23 min
Nov 9 06:59
Crypto Briefing context
Its angle: potentially, confidence, impacting
+3 h 29 m
Nov 9 10:05
Cryptonews.com context
Its angle: functionality, indefinitely, developments; with quotes

Has this happened before?

WhenWhat happenedFigure
6 days ago Anza Urges Solana Validators to Upgrade Agave Before Epoch 1079 event 1 actors in common · 4 news media
8 days ago Solflare enters ‘bunker mode’ after crypto attacks, restricts code access event 1 actors in common · 2 news media
10 days ago Anza Urges Solana Validators to Act on Critical Linux Flaw event 1 actors in common · 5 news media
10 days ago Solana Mobile Says Fake 'SKR Claim' App Reached Store Spotlight event 1 actors in common · 3 news media
13 days ago Solana (SOL) Funding Delays event 1 actors in common · 2 news media