The Solana Foundation confirmed that an attacker had a zero -daily safety deficit that allowed potentially certain coins to mint mint and even withdraw these coins from user accounts.
After May 3, a Mortem from the Solana Foundation, first discovered on April 16, said that an attacker could allow an invalid evidence that affect the “token-22 secret markers olan affecting the privacy of Solana.
The Foundation said that vulnerability was not a known abuse and that the solenda verifiers have adopted the patched version since then.
Solana zero-dad safety error affected token-22 hidden coins
The Solana Foundation said that the security vulnerability was related to two programs: Token-2022 and ZK Elgamal proof.
Token-2022 confirms the accuracy of zero evidence of information to show the right account balances, while processing the logic of the main application for mint and calculations.
The Foundation said that some algebraic components were removed from the mixture in transcript production of Fiat-Shamir, which creates a public randomness by using a encryption function.
The defect could have prepared a fake evidence of an attacker who stealing mint and Jeton-22 hidden markers, allowing an attacker to benefit from undespired components.
Token-22 hidden coins or “extension coins”, take advantage of zero information evidence for special transfers and aim to enable advanced marker functionality.
The security vulnerability was first defined on April 16 and two patches were placed to solve the problems. The super majority of Solana verifiers adopted the patches after about two days.
Solana development companies Anza, Firedancer and Jito were the main parties behind the security patch, asymmetric research, Neodyme and Otstersec.
The foundation confirmed that all funds remained safe.
Relating to: Bloomberg Intelligence increased ETF approval to 90%
Despite the correction, the special deals of the Solana Foundation about Solana Validators increased the concerns of centralization of some of the crypto community.
This contributed to a curve financing that expressed concerns about the foundation’s close relationship with solana verifiers.
“Why does someone have a list of all verifiers and contact information? They are talking about what else in these communication channels, iler they asked potentially that they could collect censorship or take back the chain.
Solana Labs CEO Anatoly Yakovenko did not directly reject the allegations, but members of the Ethereum community could coordinate to solve a similar security error.
Yakovlo said that more than 70% of Ethereum network verifiers were controlled by crypto changes or stoping operators such as Lido.
“Ethereum is the same people to reach 70%. All Lido verifiers (choir One, P2P, etc.) Binance, Coinbase and Kraken. If Geth has to push a patch, I would be happy to coordinate for them.”
In August, the Solana Foundation and Network verifiers solved another critical vulnerability behind the scenes. At that time, Albert, the General Manager of the Foundation, said that his ability to coordinate a patch did not mean that Solana was centralized.
Community Member says Ethereum will not fall into the same problem
Ethereum community member Ryan Berckmans claimed that Ethereum had sufficient customer diversity, claiming that Ethereum was subject to the same centralization problems as Solana.
The most popular Ethereum customer, Geth, said that Solana has a customer Agave with a maximum market share in Ethereum.
“This means that zero daily errors in the single left client are actual protocol errors. Change the single client program, change the protocol itself. The client is a protocol.”
Meanwhile, Solana wants to present a new customer in the next few months, Firedancer, which is expected to improve the durability and working time of the network.
However, Berckmans said Solana would need three customers in a non -decentralized way at the customer level.
Magazine: MEMEMOCAR have been taken- but even though the income decreased, solana ‘100x is better’
