In early May 2025, the Solana Foundation revealed that a critical security vulnerability affecting the confidential transfer function in the Token-2022 framework had been quietly addressed. Although the vulnerability was not exploited, its existence could have allowed attackers to mint unlimited tokens or withdraw funds from user accounts. The rapid response of Solana's developers and validators to patch the vulnerability in two days garnered praise, but also raised concerns about the level of centralization of the network due to the lack of immediate public disclosure. Despite this security scare, the Solana ecosystem continues to show strong growth, particularly in its DePIN sector, led by the expansion of Helium. Additionally, the total value locked (TVL) in Solana remained strong, exceeding $13 billion in March, reflecting ongoing DeFi activity and growing interest in the network.
