The Solana Foundation has proposed retiring durable nonces, which allow signed transactions to remain valid for weeks, following their use in the Drift protocol hack on April 1, 2026. Losses are estimated at $270 million to $285 million, more than half of Drift’s total value locked, after a six-month social engineering campaign targeting two members of its Security Council. The plan replaces the mechanism with programmatic signers integrated into the protocol while preserving offline signing, but implementation depends on audits and a migration period, with no definitive removal date set. Drift resumed operations under the name Velocity and introduced the DFX token to support affected users, while attribution of the attack to North Korea-linked actors remains likely but unconfirmed.
Source: Read the original article
