Solana moves to scrap the transaction feature used in the $270 million Drift hack

Tech Solana moves to scrap the transaction feature used in the $270 million Drift hack A draft proposal would end the 'durable nonces' feature no earlier than May 5, 2027, forcing custodians that sign offline to rebuild how they move coins. By Shaurya Malwa Nov 9, 2026, 1:36 a.m. EST 3 min read Make preferred on Share Share this article Copy link X icon X (Twitter) LinkedIn Facebook Email Make preferred on Enlarge image Summary Show Solana developers have proposed retiring durable nonces, a feature that keeps signed transactions valid indefinitely and that attackers exploited to steal at least $270 million from Drift in April. The proposal, which still requires technical approval, would not take effect before May 5, 2027, though the Solana Foundation’s migration requirements could push the deadline later. Custodians and exchanges that rely on offline signing would need alternatives, whose risks include leaving transfer authorizations valid even after a transaction fails. Solana’s developers want to retire a feature that lets a signed transaction sit unsent for weeks — the mechanism that attackers relied on to drain at least $270 million from trading protocol Drift in April. Every normal Solana transaction carries a stamp tied to a recent block, called a blockhash, which makes it expire after about 30 seconds now that the network runs 200-millisecond blocks . A mechanism known as durable nonce swaps that stamp for one that never goes stale, so a transaction signed today can still go through next month. Such a delay is required by custodians and exchanges as their approvals happen on air-gapped machines — a term for computers kept off the internet — where getting a signature out to the network can take longer than 30 seconds. It also suited the Drift attackers, who got approvals signed in advance and let those transactions sit for more than a week before using them to empty the trading platform on April 1. Drift later blamed the attack on a North Korean state-affiliated group. The proposal to remove the feature, SIMD-0723 , was filed Nov. 5 by Gabe Rodriguez of Anza, the firm behind Solana’s main validator software. “After activation, every transaction needs a recent blockhash,” it says. The proposal does not mention Drift, but instead builds its case on years of bugs, including a 2022 incident in which “a failed transaction was processed through both the blockhash and nonce paths, halting mainnet for about 4.5 hours.” The draft also puts the first date on a plan the Solana Foundation announced in October. “The feature will not be activated on mainnet-beta before 2027-05-05,” it says, giving users “at least six months to migrate, counted from this proposal’s publication on 2026-11-05.” The Foundation’s own deprecation page still says “No date set” and starts the six-month clock only once a replacement is ready, which could push the cutoff later. What changes A small group would feel most of the change. Durable nonce transactions made up about 3% of Solana’s traffic in one June measuring period but paid 30% of all priority fees, the tips users add to get processed first. Just 555 accounts sent 97.5% of them, according to data from researcher Max Resnick . Resnick’s post does not say who runs those accounts, and it describes the feature being “coopted for durable nonce spam.” The proposal names custodians as a separate affected group. “This includes custodians and exchanges that use air-gapped signing, where approvals take longer than that window,” it saod. Their replacement would be an onchain program that checks an offline signature, with Anza’s Programmatic Signer and Blueshift’s Vector named as options. Those programs bring a risk of their own, however, and the draft warns that “a failed execution can leave an authorization usable, so a failed submission is not a revocation.” A custody desk that sees a transfer fail could not assume the approval behind it had died. The proposal still needs sign-off from at least one engineer at Anza and one at Firedancer, the rival validator software built by Jump, before it can be merged. Latest Crypto News 1 SpaceX proposes a $24 billion Texas supercomputer worth 17 times its bitcoin pile 7 minutes ago 2 Two rival Ethereum proposals aim to stop Glamsterdam breaking old contracts 1 hour ago 3 Binance's bitcoin mining pool finds just one block in a week as shutdown nears 2 hours ago 4 Bitcoin drops, then pops as Nvidia cheating scandal and failed Iran talks trigger volatility 3 hours ago 5 What the election results mean for crypto: State of Crypto 11 hours ago 6 Stablecoin growth has stalled. The payments boom hasn't 11 hours ago 7 These Finland homes get free heat from bitcoin miners (as long as BTC stays above $70,000) 18 hours ago 8 Binance users in some European countries told to pull crypto before fees kick in, with accounts closing by year end 1 day ago 9 U.S. Treasury moves to cut off crypto exchange MEXC over $16 billion in alleged illicit flows 1 day ago 10 Gnosis Pay breach exposes card numbers, home addresses and linked crypto wallets 1 day ago Latest Research Beyond the Risk-Free Rate: Diversified Real World Yield in Productive Stablecoins Beyond the Risk-Free Rate: Diversified Real World Yield in Productive Stablecoins Diversified RWA stablecoins sustain 5-7% yield from real credit as crypto funding compresses to ~4%. GENIUS pushes yield off-chain; TAM grows to $4B in 3 years. By CoinDesk Research Sep 24, 2026 Commissioned by RealFi Diversified RWA stablecoins sustain 5-7% yield from real credit as crypto funding compresses to ~4%. GENIUS pushes yield off-chain; TAM grows to $4B in 3 years. Why it matters : Diversified RWA stablecoins sustain 5-7% yield from real credit as crypto funding compresses to ~4%. GENIUS pushes yield off-chain; TAM grows to $4B in 3 years. View Full Report More From Tech Two rival Ethereum proposals aim to stop Glamsterdam breaking old contracts Binance's bitcoin mining pool finds just one block in a week as shutdown nears Live updates: Bitcoin flatlines under $76,000 as stock bounce loses steam into the close