Solana is weighing a proposal filed on November 5 to remove durable nonces, which let signed transactions stay valid far beyond the usual roughly 30-second window. Attackers used that feature in April’s attack on Drift, a Solana-based trading protocol.

Attackers held pre-signed transactions for more than a week before draining at least US$270 million on April 1. Drift later attributed the attack to a North Korean state-affiliated group.

Gabe Rodriguez of Anza, the company behind Solana’s main validator software, filed the proposal. It cites bugs including a 2022 incident that halted Solana mainnet for about 4.5 hours. The draft says the change will not be activated before May 5, 2027.

Custodians and exchanges that use air-gapped, or offline, signing would need alternatives such as on-chain signature verification. The proposal warns that failed submissions may still leave those authorizations usable.

The proposal still needs sign-off from at least one engineer each at Anza and Firedancer, Jump’s validator client, before it can be merged.

The Solana Foundation’s page on planned durable nonce deprecation still says “No date set” and specifies that a six-month migration window will begin only once a replacement is ready, potentially pushing the cutoff later.

🔗 Source: CoinDesk