Solana Rapidly Patches Critical Zero-Day Vulnerability to Avert Potential Network Catastrophe

Solana developers discreetly fixed a zero-day vulnerability discovered in core cryptographic components of the Token-2022 and ZK ElGamal Proof programs, which could have allowed malicious actors to mint unlimited tokens and siphon user funds. Collaborating with major blockchain security auditors, Solana's core teams privately distributed a security patch to validators starting April 17, with over 70% of network stake adopting the fix within 24 hours—enough to secure the network. No exploitation was detected before public disclosure. While the maneuver is credited with preventing a major security crisis and protecting users, the approach of centralized, private patching has sparked debate over transparency and decentralization within the Solana ecosystem.