Solana bug reports now cost 1 SOL as AI floods security teams with spam

Solana’s Firedancer is the high-performance validator client being built for the network, so changes to how its security team handles reports matter for anyone finding flaws in the software. A 1 SOL reporting fee marks a shift from open intake toward a gated process, which is a notable change in a security workflow that usually depends on broad participation. The move sits at the intersection of spam control and vulnerability disclosure, both of which are central to keeping blockchain infrastructure robust.

For researchers, the new fee raises the cost of submitting findings and may change who bothers to file them in the first place. Larger teams and well-funded security contributors can absorb the charge more easily than independent reviewers or smaller groups. That creates a practical divide between filtering junk and keeping the door open to legitimate disclosure. (per cryptobriefing.com)

The wider trade-off is between defensive friction and open security review, and Solana’s approach puts that trade-off into a visible payment gate. Crypto systems rely on outside scrutiny, yet AI spam has made that scrutiny harder to manage. A paid report channel may improve triage, but it also risks narrowing the pool of people who can participate in finding weaknesses.

Still open is how often the fee will apply in practice, how Firedancer will handle borderline submissions, and whether the policy changes the flow of real vulnerability reports. It is also unclear whether Solana security teams will keep the 1 SOL requirement in place long term or adjust it if the mix of reports changes. The next useful signal will be whether researchers continue to disclose issues through that channel and how the team responds to the quality of submissions.