Just days after the decentralized finance platform Drift Protocol suffered a $270 million exploit at the hands of a North Korean state-affiliated group, the Solana Foundation has unveiled a suite of security initiatives. The centerpiece of this effort is Stride, a structured evaluation program led by Asymmetric Research that will assess Solana DeFi protocols against eight key security pillars and publish the findings publicly. Additionally, the Solana Incident Response Network (SIRN) has been introduced, a membership-based group of security firms and researchers focused on providing real-time crisis response.
While these initiatives address some of the issues exposed by the Drift hack, they do not directly address the human vulnerability that led to the loss. The attackers had spent six months building relationships with Drift contributors and compromised their devices through a malicious code repository and a fake TestFlight app. Under the Stride program, protocols with more than $10 million in total value locked (TVL) that pass the evaluation will receive ongoing operational security and active threat monitoring, funded by Solana Foundation grants, with coverage tailored to each protocol's risk profile. For protocols with over $100 million in TVL, the foundation will also fund formal verification, a mathematical method that checks every possible execution path in a smart contract to ensure correctness.
The network is available to all Solana protocols but prioritizes those with higher TVL. The founding members of SIRN include Asymmetric Research, OtterSec, Neodyme, Squads, and ZeroShadow.
Although Stride's formal verification would not have caught the North Korean attack, which exploited compromised devices to obtain multisig approvals, SIRN could have potentially aided in the response. The incident highlights the gap between on-chain correctness and off-chain human trust, a gap that current smart contract audits and monitoring tools are not designed to cover. The Solana Foundation has emphasized that these programs do not shift the underlying responsibility away from the protocols themselves, a point that takes on added significance in light of the Drift postmortem, which revealed that individual contributor devices were the entry point for the nation-state attack.
Solana already offers several free security tools for builders, including Hypernative for threat detection, Range Security for real-time monitoring, and Neodyme's Riverguard for attack simulation.