In response to the recent $270 million exploit of the Drift Protocol, a decentralized finance platform on Solana, the Solana Foundation has announced a multifaceted security overhaul. The new measures, unveiled just five days after the hack, aim to bolster the security of Solana's DeFi ecosystem. Central to this effort is Stride, a rigorous evaluation program led by Asymmetric Research that will assess Solana DeFi protocols against eight key security pillars and publicly disclose its findings.
Additionally, the Solana Incident Response Network (SIRN) has been established, a membership-based collective of security firms and researchers focused on providing real-time crisis response. While these initiatives address certain vulnerabilities exposed by the Drift hack, they do not directly address the human element that was exploited, where attackers spent six months building relationships with Drift contributors before compromising their devices.
Under the Stride program, protocols with over $10 million in total value locked that pass the evaluation will be eligible for ongoing operational security and active threat monitoring, funded by Solana Foundation grants. Protocols with over $100 million in total value locked will also receive funding for formal verification, a mathematical method that verifies the correctness of every possible execution path in a smart contract. The founding members of SIRN include OtterSec, Neodyme, Squads, and ZeroShadow, and the network is available to all Solana protocols, prioritized based on their total value locked. The introduction of Stride and SIRN underscores the evolving landscape of cryptocurrency security, where both technological and human factors play critical roles.
Although these new measures hold promise, they would not have prevented the North Korean attack on Drift, which exploited the gap between on-chain correctness and off-chain human trust. The incident highlights the complexity of security in the cryptocurrency space, where no single solution can guarantee absolute safety.
The Solana Foundation has emphasized that these new programs do not absolve protocols of their underlying responsibility for security, a point underscored by the Drift hack, where individual contributor devices were the entry point for a nation-state attack. Solana already offers several free security tools for builders, including Hypernative for threat detection, Range Security for real-time monitoring, and Neodyme's Riverguard for attack simulation, further demonstrating its commitment to enhancing ecosystem security.