Crypto Crisis Averted: Inside Solana’s Secret Patch for Confidential Token Exploits
By: ethnews|2025/05/04 23:00:03
0
Share
A Solana ZK-Proof flaw allowed forging confidential token transfers; patches rolled out within 48 hours to prevent exploits.Engineers fixed unhashed data gaps in Solana’s ZK ElGamal program, stopping unauthorized mints or withdrawals.In April 2025, a security report submitted to the Anza GitHub repository outlined a potential flaw in Solana’s ZK ElGamal Proof program, a component tied to its confidential token system. The report included a proof of concept demonstrating how an attacker could create invalid proofs that the program might accept. Engineers from Anza, Firedancer, and Jito confirmed the issue within hours, finding that unhashed data in the program’s verification process could allow forged transactions.No exploits were detected before the patchBy the evening of April 17, Solana Foundation and Jito teams began privately distributing a fix to validator operators. Later that night, a second related flaw was identified, prompting another update. Both patches underwent review by security firms Asymmetric Research, Neodyme, and OtterSec before reaching validators. By April 18, over two-thirds of the network’s validators had implemented the fixes, ensuring the blockchain’s security. A public announcement followed that evening, confirming the cluster’s stability.Solana’s Token-2022 standard, which supports confidential transfers, relies on two components: the Token-2022 program for managing tokens and the ZK ElGamal Proof program for verifying encrypted balances. The latter uses a cryptographic method called the Fiat-Shamir Transformation to convert interactive proofs into non-interactive ones. This process requires hashing all mathematical inputs to generate verification parameters.The vulnerability stemmed from incomplete hashing during proof verification. Attackers could exploit this gap to fabricate transactions, such as minting tokens without authorization or withdrawing from protected accounts. The patch, released in versions Agave v2.1.21/Jito-Solana v2.1.21-jito and later iterations, corrected the hashing process. Firedancer’s update (v0.411.20121) incorporated the same adjustments.No changes were needed for the Token-2022 program itself, as the issue was isolated to the proof system. Security audits conducted prior to the incident and post-patch reviews confirmed the solution’s effectiveness.The coordinated response prevented disruption to Solana’s network. Validators adopted the updates swiftly, and no funds were compromised. While the incident underscores the challenges of securing complex cryptographic systems, the resolution highlights the effectiveness of collaborative problem-solving in decentralized environments.For users of Token-2022 confidential tokens, the takeaway is clear: the system remains secure, but vigilance is part of the process. Developers continue to prioritize proactive measures, ensuring that potential risks are addressed before they materialize.Source: SOL/TradingviewAs of now, Solana (SOL) is trading at $146.27, showing a -0.88% decrease in the last 24 hours and a -2.18% decline over the past 7 days. Its market capitalization stands at approximately $75.77 billion, placing it firmly in the top 10 cryptocurrencies. With a circulating supply of over 520 million tokens, SOL continues to be one of the leading Layer 1 blockchains focused on high-speed, low-cost transactions.From a technical standpoint, SOL remains bullish over the medium-term with gains of 18.6% over the last 30 days, though recent corrections signal possible consolidation. Its trading volume in the past 24 hours is around $1.7 billion, slightly lower, which may indicate some cooling in short-term momentum. Key resistance remains near $150, while strong support holds around the $140 mark.Based on current chart patterns and market sentiment, ETHNews predict SOL may reach $162.50 within the next 7–10 days, assuming no major market disruption. However, a failure to hold $140 support could bring it down to $134 briefly.The post Crypto Crisis Averted: Inside Solana’s Secret Patch for Confidential Token Exploits appeared first on ETHNews.
-- Price
--
--
--
This content is provided for general informational purposes only and doesn't constitute financial, investment, legal, or tax advice. Any events, rewards, online promotions, or related information mentioned herein should not be considered a recommendation, solicitation, or invitation to purchase, sell, trade, or otherwise deal in any crypto assets. Crypto assets are highly volatile and may result in loss. The availability of WEEX services, products, and related events may vary by region. You are responsible for ensuring that your participation is in accordance with applicable local laws and regulations.
You may also like

Crypto Cards Surpass One Billion, Visa Leads the Way

xStocks Expands to 714 Stocks and ETFs
xStocks has expanded to 714 stocks and exchange-traded funds (ETFs) with a cumulative trading volume of $35 billion.

How to Quickly and Profitably Exchange USDT or USDC for Hryvnia in Ukraine

BlackRock may eventually launch altcoin ETFs: Geraci

Solana reduces block confirmation time to 350 milliseconds
Solana's epoch 1021 averaged 365.4ms spacing with a 0.077% skip rate, while the 300ms stage remained pending.

Better Mortgage Starts Accepting Bitcoin-Backed Home Loans
Better Mortgage has started accepting applications for home loans using Bitcoin (BTC) as collateral for down payment loans aimed at U.S. home buyers.

SOL Spot ETF Sees Daily Net Inflow of $9.1351 Million

Long Tail of Real-World Asset Tokenization Reaches $9.6 Billion, JP Morgan Expands
The long tail size accumulated by small and medium-sized issuers in the real-world asset (RWA) tokenization market has been reported to be approximately $9.6 billion (about 13.3 trillion won). This indicates a trend where multiple issuers and platforms are growing asset classes together, rather than...

Galaxy Digital Launches $2 Million Crypto-Backed Credit Line
Galaxy Digital ($GLXY) has launched a credit line product allowing US retail customers to borrow cash against Bitcoin (BTC), Ethereum (ETH), and staked Solana (SOL) as collateral.

Large Whales Increase In-Kind Conversions with Bitcoin Spot ETFs

Metaplex Launches Solana Asset Dashboard

xStocks Secures $1 Million Liquidity for 5 Assets
The hyper-liquid (HYPE) native spot market trading for five xStocks (xStocks) has reported a single asset liquidity of approximately $1 million (about 1.4 billion KRW), with an average spread of 8 to 12 basis points.

21Shares: Solana Advances Inflation Reduction and Burn Proposal, Staking Rewards May Be Halved

DeFi Development Launches Real-Time Data Platform for Solana

Dashboard on the State of Solana: DFDV Worth 222 Million in SOL, but Loses 27 Million

12 Meme Coins Trade After Dolly Parton's Death

Bank Leumi to Launch Cryptocurrency Trading in Early 2027
Israel's largest bank, Bank Leumi, is set to launch cryptocurrency trading services for customers in early 2027. The bank's app will allow trading of Bitcoin (BTC), Ethereum (ETH), and Solana (SOL).

Pitbull's Pitcoin Album Sparks 100% Surge in Unaffiliated Tokens

Tornado Cash Co-founder Roman Storm's Retrial Postponed to April 2027, Court to Examine 'Is Code a Crime?'

Galaxy Launches Bitcoin, Ethereum, and Solana Collateralized Lending Services

Jurassic Finance RAWR Completes B1 Disclosure, Dinosaur Fossil Token Structure Revealed
Jurassic Finance's RAWR has been marked as B1 disclosure completed in the Blockworks Token Transparency Framework. The structure for tokenizing dinosaur fossils in a Special Purpose Vehicle (SPV) has been unveiled.

RockawayX Plans to Raise $150 Million to Establish Crypto Hedge Fund

Solana Surpasses Base with 518,400 x402 Transactions
On January 20, Solana (SOL) processed 518,400 x402 transactions in a single day, surpassing Base for the first time in six months. The increase in x402 transactions is interpreted as an indicator of the frequency of AI agent payments and stablecoin usage.

Take-Two Reveals In-Game Currency Structure for Sharkbux
The SEC filing by Take-Two Interactive Software mentions the virtual currency 'Sharkbux' for GTA VI, highlighting its distinction from Solana-based meme coin trading.

$1 Billion in 48 Hours: X Prepares Crypto Trading Function on Feed

Crypto: Solana ETFs Record Their Biggest Day of the Year

Bitcoin ETF Funds Attract $2.26 Billion in Six Days

Solana Reduces Slot Time to 350 Milliseconds, Aims for 200 Milliseconds

X Trade Buttons to Launch Soon, Bier Denies Crypto Shadowban

Push for Zcash ETF Listing, Solana AI Tokenization Begins
Grayscale is pushing for the listing of its Zcash (ZEC) investment product on the NYSE Arca, while Virtuals Protocol has started offering Solana (SOL) users ownership and ...
Crypto Cards Surpass One Billion, Visa Leads the Way
xStocks Expands to 714 Stocks and ETFs
xStocks has expanded to 714 stocks and exchange-traded funds (ETFs) with a cumulative trading volume of $35 billion.
How to Quickly and Profitably Exchange USDT or USDC for Hryvnia in Ukraine
BlackRock may eventually launch altcoin ETFs: Geraci
Solana reduces block confirmation time to 350 milliseconds
Solana's epoch 1021 averaged 365.4ms spacing with a 0.077% skip rate, while the 300ms stage remained pending.
Better Mortgage Starts Accepting Bitcoin-Backed Home Loans
Better Mortgage has started accepting applications for home loans using Bitcoin (BTC) as collateral for down payment loans aimed at U.S. home buyers.
...
Customer Support:@weikecs
Business Cooperation:@weikecs
Quant Trading & MM:bd@weex.com
VIP Program:support@weex.com










