Crypto Crisis Averted: Inside Solana’s Secret Patch for Confidential Token Exploits
By: ethnews|2025/05/04 23:00:03
0
Share
A Solana ZK-Proof flaw allowed forging confidential token transfers; patches rolled out within 48 hours to prevent exploits.Engineers fixed unhashed data gaps in Solana’s ZK ElGamal program, stopping unauthorized mints or withdrawals.In April 2025, a security report submitted to the Anza GitHub repository outlined a potential flaw in Solana’s ZK ElGamal Proof program, a component tied to its confidential token system. The report included a proof of concept demonstrating how an attacker could create invalid proofs that the program might accept. Engineers from Anza, Firedancer, and Jito confirmed the issue within hours, finding that unhashed data in the program’s verification process could allow forged transactions.No exploits were detected before the patchBy the evening of April 17, Solana Foundation and Jito teams began privately distributing a fix to validator operators. Later that night, a second related flaw was identified, prompting another update. Both patches underwent review by security firms Asymmetric Research, Neodyme, and OtterSec before reaching validators. By April 18, over two-thirds of the network’s validators had implemented the fixes, ensuring the blockchain’s security. A public announcement followed that evening, confirming the cluster’s stability.Solana’s Token-2022 standard, which supports confidential transfers, relies on two components: the Token-2022 program for managing tokens and the ZK ElGamal Proof program for verifying encrypted balances. The latter uses a cryptographic method called the Fiat-Shamir Transformation to convert interactive proofs into non-interactive ones. This process requires hashing all mathematical inputs to generate verification parameters.The vulnerability stemmed from incomplete hashing during proof verification. Attackers could exploit this gap to fabricate transactions, such as minting tokens without authorization or withdrawing from protected accounts. The patch, released in versions Agave v2.1.21/Jito-Solana v2.1.21-jito and later iterations, corrected the hashing process. Firedancer’s update (v0.411.20121) incorporated the same adjustments.No changes were needed for the Token-2022 program itself, as the issue was isolated to the proof system. Security audits conducted prior to the incident and post-patch reviews confirmed the solution’s effectiveness.The coordinated response prevented disruption to Solana’s network. Validators adopted the updates swiftly, and no funds were compromised. While the incident underscores the challenges of securing complex cryptographic systems, the resolution highlights the effectiveness of collaborative problem-solving in decentralized environments.For users of Token-2022 confidential tokens, the takeaway is clear: the system remains secure, but vigilance is part of the process. Developers continue to prioritize proactive measures, ensuring that potential risks are addressed before they materialize.Source: SOL/TradingviewAs of now, Solana (SOL) is trading at $146.27, showing a -0.88% decrease in the last 24 hours and a -2.18% decline over the past 7 days. Its market capitalization stands at approximately $75.77 billion, placing it firmly in the top 10 cryptocurrencies. With a circulating supply of over 520 million tokens, SOL continues to be one of the leading Layer 1 blockchains focused on high-speed, low-cost transactions.From a technical standpoint, SOL remains bullish over the medium-term with gains of 18.6% over the last 30 days, though recent corrections signal possible consolidation. Its trading volume in the past 24 hours is around $1.7 billion, slightly lower, which may indicate some cooling in short-term momentum. Key resistance remains near $150, while strong support holds around the $140 mark.Based on current chart patterns and market sentiment, ETHNews predict SOL may reach $162.50 within the next 7–10 days, assuming no major market disruption. However, a failure to hold $140 support could bring it down to $134 briefly.The post Crypto Crisis Averted: Inside Solana’s Secret Patch for Confidential Token Exploits appeared first on ETHNews.
-- Price
--
--
--
This content is provided for general informational purposes only and doesn't constitute financial, investment, legal, or tax advice. Any events, rewards, online promotions, or related information mentioned herein should not be considered a recommendation, solicitation, or invitation to purchase, sell, trade, or otherwise deal in any crypto assets. Crypto assets are highly volatile and may result in loss. The availability of WEEX services, products, and related events may vary by region. You are responsible for ensuring that your participation is in accordance with applicable local laws and regulations.
You may also like

UK's National Crime Agency Freezes $13.6M of Premier League Money in Sorare Probe: Report

Polkadot Surpasses Major Networks with Nakamoto Coefficient of 169
Polkadot (DOT) has recorded a higher Nakamoto coefficient than major networks in the blockchain decentralization comparison metric. According to public data, the distribution of validators is notable, but this ...

DeFi Development prices $19.8M CHAD stock offering

Grok Allows Buying and Requesting Cryptocurrency Loans

Anza Removes Floating Point Operations from Solana Core Protocol to Reduce Consensus Risks

OpenSea Launches Solana NFT Trading Feature, Four Years After Initial Beta Release

Solana Transaction Fees Reach All-Time High, Validator Node Inflation Reduction Accelerates to 30%
Bitwise Solana ETF Surpasses $1 Billion in Assets Under Management
Bitwise's Solana (SOL) staking ETF has surpassed $1 billion (approximately 1.368 trillion KRW) in assets under management just 10 months after its launch.

Zano's Sixth Hard Fork Launches, Supporting Non-Custodial Cross-Chain to Ethereum, Solana, and TON

Solana Crypto Partnership Achieves Record 169.9 Million Transactions

PayBox Launches Grok Payment Feature, Users Can Complete Transactions Through Conversation

HNT Rises Nearly 100% After Helium Wi-Fi Adoption in Celina

Fomo Enters Top Five Financial Apps in the U.S., Surpassing Cash App and Kalshi

Catapult Trade Secures Approximately $6.6 Million in Funding with Participation from KuCoin Ventures

Bitcoin Quantum Resistant Transaction Test and SHRINCS Signature Proposal

USD1 flows to Binance as Fireblocks wallet moves $30M

Solana Reduces Issuance by 18.9 Million SOL; BTC Quantum Experiment Underway
The quantum resistance experiment of Bitcoin (BTC) and the passing of Solana's (SOL) issuance reduction plan have emerged as long-term security and supply structure agendas in the blockchain market this week.

PumpFun App Daily Trading Volume Exceeds $50 Million
The daily trading volume of the PumpFun (PUMP) mobile app has exceeded $50 million (approximately 68.9 billion KRW), with the number of transactions increasing to 905,000. The app usage metrics of the Solana (SOL)-based meme coin issuance platform indicate...

15 wallets made $312,000 in a suspected rug pull of the GOLD token

Solana ETF Surpasses $1 Billion, Highlighting Structural Differences with Ripple ETF
Bitwise's Solana (SOL) staking ETF has surpassed $1 billion (approximately 1.378 trillion KRW) in assets under management, highlighting the structural differences with the Ripple (XRP) spot ETF.

Avici Completes Full Refund and Offers 10% Cashback

Blockchain: Mastercard Reveals What Banks Really Require
Mastercard and Sei publish a study on the criteria banks use to evaluate a blockchain: finality, costs, compliance, scalability.

Fogo Foundation Reports Unauthorized Transfer of 400 Million FOGO Tokens
The Fogo Foundation reported that an unknown attacker has transferred approximately 400 million FOGO tokens, while the blockchain continues to operate normally and efforts with exchanges, authorities, and forensic experts are ongoing.
SOL Spot ETF Sees Daily Net Inflow of $18.08 Million

Rain Completes Fix for Vulnerability in Legacy Solana Contracts

Zerion API Introduces $0.01 USDC Payment Per Call
The Zerion API has introduced a payment structure of $0.01 USDC (approximately 14 KRW) per call for on-chain data queries by AI agents. Agents can request wallet portfolios, transaction histories, and DeFi position data without an API key.

Avici attack drains over $1M from Solana users

Strategy’s 6,948 BTC sales were a narrative risk: Bitfinex

Kraken Supports Solana Inflation Reform
🚨 Kraken switched to a yes vote in the last hours of the inflation reform vote on Solana, changing the balance for $SOL.
📊 The SGP 0002 proposal received 65.15% support but fell short of the required 66.67% threshold.
🔥 The SGP 0003 proposal failed to reach the daily burn target of 9,000 SOL due ...

Goldman Sachs Reveals $88.08 Million Solana ETF Holdings
UK's National Crime Agency Freezes $13.6M of Premier League Money in Sorare Probe: Report
Polkadot Surpasses Major Networks with Nakamoto Coefficient of 169
Polkadot (DOT) has recorded a higher Nakamoto coefficient than major networks in the blockchain decentralization comparison metric. According to public data, the distribution of validators is notable, but this ...
DeFi Development prices $19.8M CHAD stock offering
Grok Allows Buying and Requesting Cryptocurrency Loans
Anza Removes Floating Point Operations from Solana Core Protocol to Reduce Consensus Risks
OpenSea Launches Solana NFT Trading Feature, Four Years After Initial Beta Release
...
Customer Support:@weikecs
Business Cooperation:@weikecs
Quant Trading & MM:bd@weex.com
VIP Program:support@weex.com









