Crypto Crisis Averted: Inside Solana’s Secret Patch for Confidential Token Exploits
By: ethnews|2025/05/04 23:00:03
0
Share
A Solana ZK-Proof flaw allowed forging confidential token transfers; patches rolled out within 48 hours to prevent exploits.Engineers fixed unhashed data gaps in Solana’s ZK ElGamal program, stopping unauthorized mints or withdrawals.In April 2025, a security report submitted to the Anza GitHub repository outlined a potential flaw in Solana’s ZK ElGamal Proof program, a component tied to its confidential token system. The report included a proof of concept demonstrating how an attacker could create invalid proofs that the program might accept. Engineers from Anza, Firedancer, and Jito confirmed the issue within hours, finding that unhashed data in the program’s verification process could allow forged transactions.No exploits were detected before the patchBy the evening of April 17, Solana Foundation and Jito teams began privately distributing a fix to validator operators. Later that night, a second related flaw was identified, prompting another update. Both patches underwent review by security firms Asymmetric Research, Neodyme, and OtterSec before reaching validators. By April 18, over two-thirds of the network’s validators had implemented the fixes, ensuring the blockchain’s security. A public announcement followed that evening, confirming the cluster’s stability.Solana’s Token-2022 standard, which supports confidential transfers, relies on two components: the Token-2022 program for managing tokens and the ZK ElGamal Proof program for verifying encrypted balances. The latter uses a cryptographic method called the Fiat-Shamir Transformation to convert interactive proofs into non-interactive ones. This process requires hashing all mathematical inputs to generate verification parameters.The vulnerability stemmed from incomplete hashing during proof verification. Attackers could exploit this gap to fabricate transactions, such as minting tokens without authorization or withdrawing from protected accounts. The patch, released in versions Agave v2.1.21/Jito-Solana v2.1.21-jito and later iterations, corrected the hashing process. Firedancer’s update (v0.411.20121) incorporated the same adjustments.No changes were needed for the Token-2022 program itself, as the issue was isolated to the proof system. Security audits conducted prior to the incident and post-patch reviews confirmed the solution’s effectiveness.The coordinated response prevented disruption to Solana’s network. Validators adopted the updates swiftly, and no funds were compromised. While the incident underscores the challenges of securing complex cryptographic systems, the resolution highlights the effectiveness of collaborative problem-solving in decentralized environments.For users of Token-2022 confidential tokens, the takeaway is clear: the system remains secure, but vigilance is part of the process. Developers continue to prioritize proactive measures, ensuring that potential risks are addressed before they materialize.Source: SOL/TradingviewAs of now, Solana (SOL) is trading at $146.27, showing a -0.88% decrease in the last 24 hours and a -2.18% decline over the past 7 days. Its market capitalization stands at approximately $75.77 billion, placing it firmly in the top 10 cryptocurrencies. With a circulating supply of over 520 million tokens, SOL continues to be one of the leading Layer 1 blockchains focused on high-speed, low-cost transactions.From a technical standpoint, SOL remains bullish over the medium-term with gains of 18.6% over the last 30 days, though recent corrections signal possible consolidation. Its trading volume in the past 24 hours is around $1.7 billion, slightly lower, which may indicate some cooling in short-term momentum. Key resistance remains near $150, while strong support holds around the $140 mark.Based on current chart patterns and market sentiment, ETHNews predict SOL may reach $162.50 within the next 7–10 days, assuming no major market disruption. However, a failure to hold $140 support could bring it down to $134 briefly.The post Crypto Crisis Averted: Inside Solana’s Secret Patch for Confidential Token Exploits appeared first on ETHNews.
-- Price
--
--
--
This content is provided for general informational purposes only and doesn't constitute financial, investment, legal, or tax advice. Any events, rewards, online promotions, or related information mentioned herein should not be considered a recommendation, solicitation, or invitation to purchase, sell, trade, or otherwise deal in any crypto assets. Crypto assets are highly volatile and may result in loss. The availability of WEEX services, products, and related events may vary by region. You are responsible for ensuring that your participation is in accordance with applicable local laws and regulations.
You may also like

Goldman Sachs Reveals $88.08 Million Solana ETF Holdings

Solana Governance Proposal SGP-0002 Passed, Schwab to Support Trading
The governance proposal SGP-0002 aimed at reducing the issuance rate of the Solana (SOL) network has passed with 68.77% support. The fee structure reform proposal SGP-0003 did not meet the passage threshold with 62.72% support.

Solana Raises Over $150,000 for Yellow-bellied Marmot Research Through Memecoin
A study has been tracking yellow-bellied marmots in the Gothic area of Colorado since 1962 • The latest request for continued support from the National Science Foundation was denied at the end of May • The project page shows that over $150,000 has been raised through token creator fees.

Sanctum Increases Solana TVL to 16.64 Million SOL
Sanctum has increased its total value locked (TVL) on Solana (SOL) to 16.64 million SOL, entering the top tier of Solana DeFi.

The $37 Billion Tokenization Boom Has an Ownership Problem

Ethereum and Solana Fees Covered by Intermediaries
Debate centers around who funds execution and absorbs volatility when users do not need to hold native tokens. • Visa panel shows that adjusted trading volume for stablecoins reached $1.3 trillion over 30 days, with 230.3 million transactions. • On Ethereum and Solana, fees are still paid in ETH or ...

STX crypto review 2026: Tokenomics, BTC yield and staking demand

Wall Street Increases Presence in Crypto, but Altcoin Capital Flows Become More Concentrated

API for Spot Trading Solana: Access to 500 Million Wallets to Challenge Base

Solana Faces a Choice: Preserve Staking or Rarify SOL?

Bitwise crypto ETFs attract $100M in one day, led by Solana

Charles Schwab Expands Cryptocurrency Platform, Adding Trading for Solana (SOL), Avalanche (AVAX), and Chainlink (LINK)

Virtuals Strengthens Wallet Security Policies for AI Agents
The Virtuals Protocol is enhancing wallet-level security measures to counter prompt injection threats targeting AI agent wallets.

Stablecoin Payments Reach $10.2 Trillion, ETH and SOL Gas Fees Persist
Stablecoin payments have grown to $10.2 trillion over the past 12 months, but network fees for Ethereum (ETH) and Solana (SOL) still rely on native tokens.

$88,000 in Stolen Funds Flowed into KuCoin

Ansem Optimistic About Meme Coins, Coinbase Processes Over 200 Million Transactions

SOL Spot ETF Sees Daily Net Inflow of $60.91 Million

Potential Taxable Activities for Cryptocurrencies in 2025 Estimated at Approximately 73 Trillion Yen = Chainalysis

Euro Stablecoin on Ethereum: $579 Million, More Than Double Solana and Base

August 28 Cryptocurrency: Bitcoin May Surpass Gold's Market Cap, Predicts Binance Founder

DeFi Development Expands Holdings to 2.33 Million SOL with Resumption of Solana Purchases

GTA 6 leaker sells memecoin before gameplay reveal

Chomp Completes $3.6 Million Financing Led by Jsquare and Blueyard

Correlation Trading Pairs to Propel AMM into Larger Markets, Founder Explains

Crypto Cards Surpass One Billion, Visa Leads the Way

xStocks Expands to 714 Stocks and ETFs
xStocks has expanded to 714 stocks and exchange-traded funds (ETFs) with a cumulative trading volume of $35 billion.

How to Quickly and Profitably Exchange USDT or USDC for Hryvnia in Ukraine

BlackRock may eventually launch altcoin ETFs: Geraci

Solana reduces block confirmation time to 350 milliseconds
Solana's epoch 1021 averaged 365.4ms spacing with a 0.077% skip rate, while the 300ms stage remained pending.

Better Mortgage Starts Accepting Bitcoin-Backed Home Loans
Better Mortgage has started accepting applications for home loans using Bitcoin (BTC) as collateral for down payment loans aimed at U.S. home buyers.
Goldman Sachs Reveals $88.08 Million Solana ETF Holdings
Solana Governance Proposal SGP-0002 Passed, Schwab to Support Trading
The governance proposal SGP-0002 aimed at reducing the issuance rate of the Solana (SOL) network has passed with 68.77% support. The fee structure reform proposal SGP-0003 did not meet the passage threshold with 62.72% support.
Solana Raises Over $150,000 for Yellow-bellied Marmot Research Through Memecoin
A study has been tracking yellow-bellied marmots in the Gothic area of Colorado since 1962 • The latest request for continued support from the National Science Foundation was denied at the end of May • The project page shows that over $150,000 has been raised through token creator fees.
Sanctum Increases Solana TVL to 16.64 Million SOL
Sanctum has increased its total value locked (TVL) on Solana (SOL) to 16.64 million SOL, entering the top tier of Solana DeFi.
The $37 Billion Tokenization Boom Has an Ownership Problem
Ethereum and Solana Fees Covered by Intermediaries
Debate centers around who funds execution and absorbs volatility when users do not need to hold native tokens. • Visa panel shows that adjusted trading volume for stablecoins reached $1.3 trillion over 30 days, with 230.3 million transactions. • On Ethereum and Solana, fees are still paid in ETH or ...
...
Customer Support:@weikecs
Business Cooperation:@weikecs
Quant Trading & MM:bd@weex.com
VIP Program:support@weex.com








