Solana Moves to Retire Durable Nonces After $270M Drift Hack
SIMD-0723 would retire signed transactions that never expire, closing the vector behind one of Solana's largest exploits, though the earliest switch-off lands only in May 2027.
Every Zipp story tagged #Drift, newest first.
SIMD-0723 would retire signed transactions that never expire, closing the vector behind one of Solana's largest exploits, though the earliest switch-off lands only in May 2027.
Durable nonces made up 3% of Solana traffic but paid 30% of priority fees. Killing them forces air-gapped custodians to rebuild offline signing, with no removal before May 5, 2027.
The transfers move a large tranche of the exploit proceeds beyond direct wallet visibility, while Drift users’ recovery claims remain tied to funds entering the Recovery Pool.
Users can redeem recovery tokens now, but larger reimbursements depend on future funding and the recovery of stolen assets.
Verified users receive 1 DFX for each USDT lost, but the amount they can recover now depends on a pool that holds about 3.11 million USDT.
The redemption rate depends on the Recovery Pool balance and outstanding DFX supply, so receiving 1 DFX per USDT lost does not guarantee full repayment.
The subsidy is the bet: Solana is paying high-volume traders to populate order flow before on-chain markets can prove the activity survives without the incentive.
The contradiction cuts to the heart of stablecoin governance: when an issuer can freeze funds, who decides whose funds get frozen, and on what timeline?