According to reports from Wu, the Solana Foundation discovered a zero-day vulnerability in the "confidential transfer" feature of the Token-2022 standard on April 16. This vulnerability could lead to infinite minting or asset theft. The foundation privately coordinated with validators to complete the fix within two days, emphasizing that no signs of fund loss or exploitation of the vulnerability were found.