#solana under scrutiny after secret patch for critical vulnerability.
The Solana Foundation revealed that developers quietly fixed a serious vulnerability in the network during April. The bug, which only affected Token-2022 coins, would have allowed an attacker to mint unlimited tokens and withdraw them from any account. This action has sparked a debate in the crypto community about Solana's transparency.
While the foundation acted quickly after receiving the report on April 16, working with Anza, Jito, and Firedancer to issue a patch distributed to validators, the lack of immediate public disclosure has drawn criticism. Some users question Solana's decentralization, while others defend the measure as a necessary preventive action to avoid the exploitation of the vulnerability before it was fixed. Fortunately, no incidents of exploitation were reported.