Firedancer will require researchers to permanently burn 1 SOL, worth about $100, for every bug report after a monthlong audit contest produced 809 submissions but only 127 unique security findings. The contest drew 162 researchers, and nearly half of valid submissions duplicated earlier reports. Jump Crypto believes AI helped generate or write nearly every submission.
Why it matters
The new fee targets the cost of validating AI-assisted security work. Reports remain nonrefundable even when they are invalid, out of scope or duplicates, and submissions without the burn are ineligible for rewards. Jump said the review backlog peaked at 299 open reports, forcing engineers to reproduce alleged attacks and check whether protections elsewhere in the software blocked them.
Firedancer is an alternative Solana validator client built by Jump Crypto. A serious flaw could cause validators to process transactions in the wrong order or disagree about account balances, disrupting trades and transfers. The audit contest found vulnerabilities including a scheduling error that could create that kind of network-state disagreement.
Market impact
Burning 1 SOL for each report creates a direct cost for speculative submissions and permanently removes the tokens from circulation. The measure also changes the economics of Solana security research without eliminating the upside for high-value discoveries.
Jump is temporarily doubling standard payouts through Nov. 20 and offering triple rewards for bugs specific to Solana's Alpenglow voting system. Critical Alpenglow vulnerabilities can qualify for up to $300,000, pairing a stricter submission filter with stronger incentives for exploitable flaws.
Frequently asked questions
-
Why is Firedancer charging 1 SOL for each bug report?
The fee is intended to deter speculative and duplicate submissions, reducing the review burden on engineers handling AI-assisted reports.
-
How many unique findings came from the Solana audit contest?
The contest produced 127 unique security findings from 809 reports submitted by 162 researchers.
-
What happens to the 1 SOL paid with a bug report?
The 1 SOL is permanently burned and is not refunded, even if the report is invalid, out of scope or duplicates an earlier finding.
-
How high can rewards go for Alpenglow vulnerabilities?
Critical vulnerabilities specific to Solana's Alpenglow voting system can qualify for rewards of up to $300,000.
-
Why are Firedancer vulnerabilities important for Solana?
A serious flaw could disrupt transaction processing or cause Firedancer and other Solana validators to disagree about account balances and network state.
CoinDesk