In response to the recent $270 million exploit of the Drift Protocol, a decentralized finance platform on the Solana network, the Solana Foundation has announced a range of security measures. The centerpiece of this initiative is Stride, a rigorous evaluation program led by Asymmetric Research, which will assess Solana DeFi protocols against eight key security pillars and publicly disclose its findings. Additionally, the foundation has introduced the Solana Incident Response Network (SIRN), a collaborative effort between security firms and researchers aimed at providing real-time crisis response. While these measures address some of the vulnerabilities exposed by the Drift hack, they do not directly address the human element that was exploited, where attackers spent six months building relationships with Drift contributors and compromised their devices through malicious means.
Under the Stride program, protocols with over $10 million in total value locked (TVL) that pass the evaluation will be eligible for ongoing operational security and active threat monitoring, funded by Solana Foundation grants. Protocols with over $100 million in TVL will also receive funding for formal verification, a process that mathematically verifies the correctness of smart contracts. The SIRN network, which includes founding members such as OtterSec, Neodyme, Squads, and ZeroShadow, will be available to all Solana protocols, with priority given to those with higher TVL. The introduction of these security measures highlights the evolving nature of threats in the cryptocurrency space and the need for proactive and collaborative approaches to security.
The Solana Foundation's efforts aim to enhance the security posture of the Solana ecosystem, but the complexities of human-centered attacks pose ongoing challenges that require continuous innovation and vigilance.