Major Vulnerability in Solana Secretly Fixed by Developers

Solana developers, validators, and client teams have reported that they have successfully patched a critical vulnerability that could have had serious consequences for the blockchain network. Through a coordinated effort, they secured the vast majority of the network’s stakes before publicly disclosing the issue, ensuring the integrity of the platform.

The process began on Wednesday, August 7, 2024, when the Solana Foundation contacted known network operators through private channels.

The patch itself was developed by an Anza engineer and made available on GitHub, allowing network operators to independently verify and implement the necessary changes. Detailed instructions for applying the patch were distributed by 17:00 GMT on Thursday, August 8, securing 66.6% of the network.

The vulnerability was made public after 70% of the network had applied the patch. Solana Labs later issued a critical announcement on Discord, urging all remaining operators to update their systems immediately.

“Core contributors have identified a network security issue that requires immediate attention. The v1.18.21 patch will be available in 30 minutes. Please be prepared to upgrade as soon as the announcement is sent,” the announcement reads.

*This is not investment advice.