All coins

Reporting · markets

Solana developers propose retiring durable nonces after Drift hack

A proposal filed by Anza would remove Solana's never-expiring transactions, a feature attackers exploited in the April Drift Protocol hack that drained at least $270 million.

By Dextape Desk1 min read

Share

Editorial illustration for markets coverageEditorial illustration for markets coverage

Quick take

  1. Durable nonces, which let transactions never expire, are slated for removal from Solana under a developer proposal.
  2. Drift Protocol attributed its April hack, which drained at least $270 million, to a North Korean-linked group.
  3. The proposal still needs technical approval, and its earliest mainnet activation is May 5, 2027.

Developers on the Solana network are working to phase out durable nonces, the mechanism exploited in the April hack of Drift Protocol, Cryptonews reported on November 9, 2026. According to that account, the proposal, numbered SIMD-0723, was filed on November 5 by Anza contributor Gabe Rodriguez. It would retire transactions that never expire.

Normal Solana transactions expire after about 30 seconds, while durable nonces allow transactions that never expire, which the proposal would retire. The account says attackers in the Drift case held approvals for over a week before submitting them. A North Korean-linked group was blamed by Drift for the attack, which drained at least $270 million.

The proposal has an earliest mainnet activation date of May 5, 2027, but it still needs technical approval and migration planning. Until that approval arrives, the proposal remains a plan rather than a network change. Solana is also exploring replacement offline signing programs, according to the account. The change affects exchanges and institutional custodians.

Sources

Machine-written from the publishers’ reports and checked against them · How Dextape writes

Mentioned in this story

CoinGecko last prints. Not a Dextape quote.

About the author

Dextape DeskEditors

The Dextape Desk signs Dextape's briefs, market reports and news stories, each machine-written from the named sources and checked by code before it appears.

Share this story