$SOL

What happened again?

The Solana Foundation caught a zero-day bug that could have allowed anyone to print confidential tokens for themselves and steal them from other wallets. That is, literally cheat codes for money, just no jokes 🎮

The vulnerability was discovered back on April 16, but fortunately, no one managed to take advantage of it. Otherwise, it would have been fun... but not for us.

A couple of days later, validators received a secret signal, quickly fixed everything — and it seems the world is saved again ✨

Where exactly was the leak?

• In the Token-2022 program, which is responsible for creating tokens and managing wallets;

• And in the ZK ElGamal Proof, which was supposed to verify that you actually have money and not imaginary zeros in the blockchain.

The rescue operation involved developers from Anza, Firedancer, Jito, as well as Asymmetric Research, Neodyme, and OtterSec. Thanks to them for this, or else we would have had to build a new Solana from scratch 🏗️