Solana Foundation Launches Security Program After $270M Hack
Summary:
- Drift Protocol lost $270 million to North Korean hackers who spent six months in a social engineering campaign.
- Attackers exploited 'durable nonces' (pre-signed transactions valid for one week) rather than breaking any code.
- Solana Foundation launched 'Stride' - a security audit program that evaluates DeFi protocols against eight security standards.
North Korean hackers stole $270 million from Drift Protocol on Solana. They didn't break the code - they spent six months tricking the people who control the wallet.
Social Engineering, Not Code Bugs
The attackers gained approval for misleading transactions using a Solana feature called 'durable nonces.' These pre-signed transactions stayed valid for over a week - long enough to execute the theft.
The hack wiped out 50% of Drift's total value.
Solana's New Security Program
The Solana Foundation launched 'Stride,' a security audit program led by Asymmetric Research. It evaluates DeFi protocols against eight security standards.
The Foundation also announced SIRN - a network where protocols share threat intelligence.
What to Watch
Watch whether other Solana protocols adopt Stride's recommendations before similar social engineering attacks strike.
