Shocking! Solana exposes a fatal vulnerability, hackers may mint indefinitely!
The Solana Foundation urgently patched a severe zero-day vulnerability that, if exploited by hackers, could lead to infinite minting or theft of funds, posing a threat comparable to a chain-level disaster! The vulnerability was discovered on April 16, and the official response was swift, maintaining a low profile until the issue was resolved to ensure fund safety.
However, this vulnerability has existed for a long time; although its usage rate is low, the potential risk is enormous. Notably, Paxos has been implicated in this vulnerability, but it has denied any involvement. The identity of the whistleblower remains a mystery, and the bounty for the vulnerability has not been disclosed.
Overall, while the official response was quick and avoided an incident, the closed nature of the fix has tested the trust in 'decentralization'.