In response to the recent $270 million exploit of the Drift Protocol, the Solana Foundation has announced a range of security measures aimed at bolstering the protection of its decentralized finance (DeFi) ecosystem. The centerpiece of this initiative is Stride, a rigorous evaluation program led by Asymmetric Research, which will assess Solana DeFi protocols against eight key security pillars and publicly disclose its findings. Additionally, the foundation has introduced the Solana Incident Response Network (SIRN), a collaborative effort between security firms and researchers focused on providing real-time crisis response.
While these measures address some of the vulnerabilities exposed by the Drift exploit, they do not directly address the root cause of the breach, which was the result of a six-month social engineering campaign by a North Korean state-affiliated group that compromised the devices of Drift contributors. Under the Stride program, protocols with over $10 million in total value locked (TVL) that pass the evaluation will be eligible for ongoing operational security and active threat monitoring, funded by Solana Foundation grants, with the level of coverage tailored to each protocol's specific risk profile. For larger protocols with over $100 million in TVL, the foundation will also provide funding for formal verification, a mathematical method that verifies the correctness of every possible execution path in a smart contract.
The SIRN network, which includes founding members such as OtterSec, Neodyme, Squads, and ZeroShadow, will be available to all Solana protocols, with priority given to those with higher TVL. Although the new security measures are a significant step forward, they may not have prevented the Drift exploit, which exploited the gap between on-chain correctness and off-chain human trust. However, the SIRN network could have potentially improved the response time to the attack, highlighting the importance of collaboration and rapid incident response in the face of emerging threats.