Solana's Durable Nonces Feature Exploited to Drain $270 Million from Drift Protocol
The Drift Protocol attack was unique in that it did not involve a traditional hack or bug exploit. Instead, an attacker leveraged Solana's 'durable nonces' feature to pre-sign administrative transfers, which were then executed weeks later, bypassing the protocol's multisig security measures. This feature, designed for convenience, allows transactions to remain valid indefinitely, creating a poten…