Solana Foundation to Provide Security for DeFi Protocols After Drift Hack
永远满仓
04-08 02:11
Ai Focus
The Solana Foundation and Asymmetric Research have introduced STRIDE, a security program for DeFi protocols with over $10 million TVL, offering 24/7 threat monitoring and formal verification for those with over $100 million TVL. This initiative aims to enhance security as attackers target Solana's growing locked value.
Helpful
No.Help

Nearly a week after a prominent Solana-based decentralized exchange was hit with a $285 million hack that’s been linked to North Korean hackers, the Solana Foundation has revealed plans to help secure the network’s largest DeFi protocols.

The Solana Foundation and Asymmetric Research launched STRIDE, a tiered security program that provides 24/7 threat monitoring for DeFi protocols with over $10 million in total value locked (TVL). For protocols with over $100 million TVL, the Foundation will offer “formal verification”—described in a post as “a mathematical, proof-based method that guarantees smart contract correctness by exhaustively checking every possible state and execution path.”

STRIDE—or Solana Trust, Resilience and Infrastructure for DeFi Enterprises—evaluates protocols against security standards before providing ongoing protection services. The initiative marks a significant escalation in blockchain security infrastructure as attackers target Solana's growing billions in locked value with increasingly sophisticated methods.

The program launched alongside the Solana Incident Response Network (SIRN), a membership-based collective of security firms dedicated to rapid ecosystem defense. Founding participants include Asymmetric Research along with OtterSec, Neodyme, Squads, and ZeroShadow. The framework will evolve based on real-world assessment feedback, with version 0.1 currently live.

The timing underscores an urgent need—Drift Protocol suffered an exploit where attackers drained $285 million in under 12 minutes on April 1, demonstrating the speed and scale at which modern DeFi vulnerabilities can be exploited. Drift said on Sunday that it discovered that North Korean hackers had spent six months infiltrating its team and infrastructure before executing the attack.

Such incidents highlight why major blockchain networks are taking more direct responsibility for ecosystem-wide security rather than leaving individual protocols to defend themselves.

The tiered approach based on TVL thresholds reflects how layer-1 networks are institutionalizing security as decentralized finance matures. Rather than treating all protocols equally, STRIDE allocates resources proportionally to risk—acknowledging that protocols managing hundreds of millions of dollars' worth of assets require different protection than smaller experiments.

This shift recognizes that individual smart contract audits alone cannot match the innovation pace of adversaries targeting blockchain infrastructure. Rapidly advancing AI is also a key concern, as it can help attackers and developers alike find flaws.

An upcoming Anthropic AI model codenamed Claude Mythos is being viewed as a particular threat to cybersecurity—so much so that top cybersecurity stock prices fell late last month when first details of the model were leaked. On the other hand, a recently fixed Zcash software exploit was discovered with the help of AI tooling.

Tip
$0
Like
0
Save
1
Views 352
HQYC reminds readers to view blockchain rationally, stay aware of risks, and beware of virtual token issuance and speculation. All content on this site represents market information or related viewpoints only and does not constitute any form of investment advice. If you find sensitive content, please click“Report”,and we will handle it promptly。
Submit
Comment 0
Hot
Latest
No comments yet. Be the first!
Related
Xpeng GX begins large-scale shipments to the Middle East and Africa markets; overseas pricing not yet announced, with Middle East orders exceeding 3,000 units
Xpeng Motors officially announced that its GX model has been shipped on a large scale to the Middle East and Africa markets, accelerating its global delivery efforts. The company stated that the overseas selling price of this vehicle has not yet been announced, but orders from the Middle East have already exceeded 3,000 units.
The Block
·2026-10-18 07:37:04
2
Trump claims he "can do the impossible," and during his campaign in Kentucky, he stated that if Republicans win, the Department of Defense will revitalize a local pharmaceutical factory
On Saturday, while campaigning for Republican candidates in Kentucky, Trump boasted about his power in the White House, stating that if the Republicans won, the Department of Defense would invest in reviving a local pharmaceutical factory; he also delivered a series of speeches on tariffs, the Iran war, oil prices, and congressional control.
Fortune
·2026-10-18 05:47:14
41
Meta Removes Clauses That Once Caused Concerns About Web Content Caching; AI Addresses Training Issues
Meta recently updated its terms of commercial use, stating that the company may use enterprise account domain names, web pages, or any content from URL to support, develop, improve, research, train, and maintain the integrity of Meta products and services. Legal experts interviewed by Nieman Lab believe that this wording may grant Meta the authority to scrape any publisher's website that has an Meta enterprise account for use in training AI models. However, a spokesperson for Meta stated that the updated terms do not imply any change in the way Meta scrapes online content. Subsequently, The Verge reported that this term has now been deleted.
TechCrunch
·2026-10-18 05:39:50
32
Pump.fun Launches Perpetual Contract Service, Initiating Cryptocurrency Leverage Trading
Pump.fun launches perpetual contract services, bringing Bitcoin and Ethereum leveraged trading to the platform through Hyperliquid, with maximum leverage of up to 40 times for Bitcoin and 25 times for Ethereum respectively. Hyperliquid is responsible for execution, margin requirements, funding rates, clearing, and settlement, while Pump.fun only provides the trading interface; this service is not available to users in the United States, Ontario, and other restricted regions.
The Cryptonomist
·2026-10-18 05:17:02
37
Ledger Hardware wallet tampering raises security concerns for 2026
The CEO of Mt Gox stated that reports of tampered hardware wallets can be traced back to at least December 2025, and questioned the company for not issuing more proactive warnings to customers regarding known risks. Security researcher Joe Grand also mentioned that he reported an issue with a Nano X device purchased through a Thai Lazada to Ledger in March 2026. Ledger indicated that an internal investigation has been launched regarding these findings, and in another incident involving CryptoBilis, it was confirmed that some devices contained unauthorized embedded components.
The Cryptonomist
·2026-10-18 05:16:59
31
View More