Crypto Crisis Averted: Inside Solana’s Secret Patch for Confidential Token Exploits
By: ethnews|2025/05/04 23:00:03
0
Share
A Solana ZK-Proof flaw allowed forging confidential token transfers; patches rolled out within 48 hours to prevent exploits.Engineers fixed unhashed data gaps in Solana’s ZK ElGamal program, stopping unauthorized mints or withdrawals.In April 2025, a security report submitted to the Anza GitHub repository outlined a potential flaw in Solana’s ZK ElGamal Proof program, a component tied to its confidential token system. The report included a proof of concept demonstrating how an attacker could create invalid proofs that the program might accept. Engineers from Anza, Firedancer, and Jito confirmed the issue within hours, finding that unhashed data in the program’s verification process could allow forged transactions.No exploits were detected before the patchBy the evening of April 17, Solana Foundation and Jito teams began privately distributing a fix to validator operators. Later that night, a second related flaw was identified, prompting another update. Both patches underwent review by security firms Asymmetric Research, Neodyme, and OtterSec before reaching validators. By April 18, over two-thirds of the network’s validators had implemented the fixes, ensuring the blockchain’s security. A public announcement followed that evening, confirming the cluster’s stability.Solana’s Token-2022 standard, which supports confidential transfers, relies on two components: the Token-2022 program for managing tokens and the ZK ElGamal Proof program for verifying encrypted balances. The latter uses a cryptographic method called the Fiat-Shamir Transformation to convert interactive proofs into non-interactive ones. This process requires hashing all mathematical inputs to generate verification parameters.The vulnerability stemmed from incomplete hashing during proof verification. Attackers could exploit this gap to fabricate transactions, such as minting tokens without authorization or withdrawing from protected accounts. The patch, released in versions Agave v2.1.21/Jito-Solana v2.1.21-jito and later iterations, corrected the hashing process. Firedancer’s update (v0.411.20121) incorporated the same adjustments.No changes were needed for the Token-2022 program itself, as the issue was isolated to the proof system. Security audits conducted prior to the incident and post-patch reviews confirmed the solution’s effectiveness.The coordinated response prevented disruption to Solana’s network. Validators adopted the updates swiftly, and no funds were compromised. While the incident underscores the challenges of securing complex cryptographic systems, the resolution highlights the effectiveness of collaborative problem-solving in decentralized environments.For users of Token-2022 confidential tokens, the takeaway is clear: the system remains secure, but vigilance is part of the process. Developers continue to prioritize proactive measures, ensuring that potential risks are addressed before they materialize.Source: SOL/TradingviewAs of now, Solana (SOL) is trading at $146.27, showing a -0.88% decrease in the last 24 hours and a -2.18% decline over the past 7 days. Its market capitalization stands at approximately $75.77 billion, placing it firmly in the top 10 cryptocurrencies. With a circulating supply of over 520 million tokens, SOL continues to be one of the leading Layer 1 blockchains focused on high-speed, low-cost transactions.From a technical standpoint, SOL remains bullish over the medium-term with gains of 18.6% over the last 30 days, though recent corrections signal possible consolidation. Its trading volume in the past 24 hours is around $1.7 billion, slightly lower, which may indicate some cooling in short-term momentum. Key resistance remains near $150, while strong support holds around the $140 mark.Based on current chart patterns and market sentiment, ETHNews predict SOL may reach $162.50 within the next 7–10 days, assuming no major market disruption. However, a failure to hold $140 support could bring it down to $134 briefly.The post Crypto Crisis Averted: Inside Solana’s Secret Patch for Confidential Token Exploits appeared first on ETHNews.
-- Price
--
--
--
This content is provided for general informational purposes only and doesn't constitute financial, investment, legal, or tax advice. Any events, rewards, online promotions, or related information mentioned herein should not be considered a recommendation, solicitation, or invitation to purchase, sell, trade, or otherwise deal in any crypto assets. Crypto assets are highly volatile and may result in loss. The availability of WEEX services, products, and related events may vary by region. You are responsible for ensuring that your participation is in accordance with applicable local laws and regulations.
You may also like

Ambient Launches AI Inference-Based Layer 1 Blockchain Testnet
Ambient has introduced a Layer 1 blockchain testnet that shifts the work of miners from hash calculations to AI inference, aiming to address the issues of traditional proof of work (PoW) networks.

BitGo Expands Institutional Wallet Trading by Connecting with Decibel
BitGo Holdings, Inc. has connected its institutional self-custody wallet with the Aptos-based decentralized exchange Decibel through WalletConnect.

Robinhood Chain DEX Daily Trading Volume Reaches $1.69 Billion, User Contribution Only 1% to 2%

Uniswap Acquires PONS Token on Robinhood Chain

Fidelity Indicates That a Crypto Dip Level May Have Been Seen
Fidelity analysts stated that the recent upward movement seen in recent weeks should not be interpreted as the bull season having "definitely" begun.

Number of Tokenized Stock Holders Increases to 2 Million

Access Protocol Joins as Official Sponsor Partner for KBW 2026

SOL Spot ETF Sees Daily Net Inflow of $6.3996 Million

Remixpoint sells Ethereum, Solana, XRP, Dogecoin, retains 121 million USD in Bitcoin
Remixpoint sold $5.5 million of Ethereum, Solana, XRP and Dogecoin while keeping roughly $121 million in Bitcoin.

Coinbase files to bring stock perpetuals to the US

Correlation Trading Pairs Will Drive AMM into Global Financial Markets

Chairman of Solana Foundation: The Internet Capital Market Will Become the Largest Capital Market
Tokenization is not just expanding access to various tokens; it is fundamentally changing the ways value is created, held, financed, and flowed.

Robinhood Chain Tops Daily Revenue with $4.01 Million
🚨 Robinhood Chain generated $4.01 million in revenue in the last 24 hours.
📊 The network significantly outperformed Canton and Tron during the same period.
💡 While Tron remained at $873,930 in revenue, Robinhood Chain reached a level exceeding four times that.
🔍 The increase in user and DeFi act...

Solana Transaction V1 Increases Transaction Size to 4,096 Bytes
Anza launched Transaction V1 on the Solana testnet on September 1 • The transaction limit on the testnet increased from 1,232 bytes to 4,096 bytes • Mainnet launch is planned for September 9.

Remixpoint Sells $5.54 Million in Altcoins to Hold Bitcoin

Standard Chartered: Monthly Trading Volume of Stablecoins Reaches $7 Trillion, Solana Accounts for About 20%

Archer Joins Solana Foundation Frontier Traders Program

Robinhood Chain DEX Trading Volume Reaches $1.89 Billion, Plenti Secures $3 Million Funding

Jupiter Launches Universal Deposit, Supporting Multi-Chain Asset Cross-Chain Exchange for USDC

Kimi's Parent Company Moonlight Dark Side Launches Hong Kong IPO with Valuation of $50 Billion

HYPE First Adopted in US Cryptocurrency Index ETF, Following SOL

Solana's Transaction Volume Reaches 5.2 Billion, Revenue Drops to $141 Million
Solana processed 5.2 billion non-voting transactions in August, up 19% from July • 21Shares calculated the gross revenue for the first half of 2026 at $141 million, down from $1.09 billion a year ago • A letter from DeFi Development Corp. to the SEC indicated that the network revenue for the second ...

HINC Used as Collateral for Global Dollar Loans on Loopscale
Securitize has linked the tokenized high-yield bond fund HINC as a collateral asset in the Solana-based lending market Loopscale. Eligible investors can ...

DeFi Development Seeks to Raise $20 Million to Purchase Solana

Solana inflation cut is premature, SOL Strategies CEO says

Privy Connects Crypto Wallets and Bank Accounts

OpenSea Adds Solana NFT Trading to OS2

ArbitrumDAO Income Reached $6.19 Million In H1

Bitmine Accumulates 5,901,112 ETH, Close to 5% of Total Supply

Backpack Adds Micron, SanDisk Shares as Margin Collateral
Ambient Launches AI Inference-Based Layer 1 Blockchain Testnet
Ambient has introduced a Layer 1 blockchain testnet that shifts the work of miners from hash calculations to AI inference, aiming to address the issues of traditional proof of work (PoW) networks.
BitGo Expands Institutional Wallet Trading by Connecting with Decibel
BitGo Holdings, Inc. has connected its institutional self-custody wallet with the Aptos-based decentralized exchange Decibel through WalletConnect.
Robinhood Chain DEX Daily Trading Volume Reaches $1.69 Billion, User Contribution Only 1% to 2%
Uniswap Acquires PONS Token on Robinhood Chain
Fidelity Indicates That a Crypto Dip Level May Have Been Seen
Fidelity analysts stated that the recent upward movement seen in recent weeks should not be interpreted as the bull season having "definitely" begun.
Number of Tokenized Stock Holders Increases to 2 Million
...
Customer Support:@weikecs
Business Cooperation:@weikecs
Quant Trading & MM:bd@weex.com
VIP Program:support@weex.com









