Hacking News
Solana Proposes Retiring Durable Nonces After Drift Hack
Solana developers propose retiring a feature called durable nonces, which attackers used to drain at least $270 million from the Drift decentralized exchange in April. The feature allowed signed transactions to remain valid indefinitely, potentially giving custodians and exchanges breathing room. The attack, linked to North Korean state-affiliated actors, involved a six-month social engineering campaign aimed at Drift’s Security Council.