Solana Foundation Introduces Comprehensive Security Upgrade Following $270 Million Drift Hack

In response to the recent $270 million exploit of decentralized finance platform Drift Protocol, the Solana Foundation has announced a range of security measures. The centerpiece of this initiative is Stride, a structured evaluation program led by Asymmetric Research, which will assess Solana DeFi protocols against eight key security pillars and make its findings publicly available. Additionally, the Solana Incident Response Network (SIRN) has been introduced, a membership-based group of security firms and researchers focused on providing real-time crisis response. While these measures address some of the vulnerabilities exposed by the Drift hack, they do not directly address the human element that was exploited, where attackers spent six months building relationships with Drift contributors before compromising their devices.

Under the Stride program, protocols with over $10 million in total value locked that pass the evaluation will receive ongoing operational security and active threat monitoring, funded by Solana Foundation grants. For protocols with over $100 million in total value locked, the foundation will also fund formal verification, a mathematical method that checks every possible execution path in a smart contract to ensure correctness.

The network is available to all Solana protocols, with priority given to those with higher total value locked. The founding members of SIRN include Asymmetric Research, OtterSec, Neodyme, Squads, and ZeroShadow. Although the formal verification process would not have prevented the North Korean attack, which exploited compromised devices to obtain multisig approvals, the dedicated incident response network could have potentially shortened the response time.

The foundation has emphasized that these programs do not shift the underlying responsibility away from the protocols themselves. Solana already offers several free security tools for builders, including Hypernative for threat detection, Range Security for real-time monitoring, and Neodyme's Riverguard for attack simulation.