Whalesbook
New Security Pillars for Solana DeFi
The Solana Foundation is implementing a series of new security measures after a major $270 million exploit impacted the Drift Protocol. The incident, which happened just five days ago, revealed vulnerabilities stemming from social engineering rather than flaws in the smart contract code itself.
Stride Program and SIRN
Central to the foundation's response is 'Stride,' a structured evaluation program by Asymmetric Research. Stride will rigorously assess Solana's decentralized finance protocols against eight security pillars, publishing its findings openly. DeFi protocols with over $10 million in total value locked (TVL) that pass Stride's evaluation will receive grants for ongoing security and threat monitoring. Protocols above $100 million TVL will also have the cost of formal verification — a mathematical method that guarantees smart contract correctness — covered. Additionally, the Solana Incident Response Network (SIRN) has been launched. This consortium, open to security firms and researchers, aims to provide real-time crisis response. OtterSec, Neodyme, Squads, and ZeroShadow are among its founding members.
Addressing the Human Element
These programs aim to address systemic security weaknesses. However, the Drift exploit highlighted a gap between secure on-chain code and off-chain human trust. Attackers spent six months building trust with Drift contributors, eventually compromising devices through a malicious code repository and a fake TestFlight app. This type of attack vector, where transactions appear valid, would not have been prevented by formal verification or constant on-chain monitoring. SIRN could potentially speed up responses to freeze stolen assets, particularly in cases like Circle's delayed action on over $230 million in USDC, underscoring the value of quick, coordinated incident response.
Shared Responsibility
The Solana Foundation stressed that these new initiatives do not remove the responsibility of individual protocols for their own security. The Drift postmortem, which identified compromised contributor devices as the entry point for what is believed to be a nation-state attack, supports this view. Solana already provides builders with free security tools like Hypernative for threat detection and Riverguard for attack simulations, demonstrating a multi-layered strategy for ecosystem security.