Solana Targets Durable Nonces After $270M Drift Hack as Pump.fun Backlash Grows

Solana Targets Durable Nonces After $270M Drift Hack as P... Solana proposes retiring durable nonces after the $270M Drift hack as Pump.fun faces growing backlash over fees and influencer transparency. The post Solana Targets Durable Nonces After $270M Drift Hack as Pump.fun Backlash Grows appeared first on Cryptonews. Solana developers are preparing to remove durable nonces, the transaction feature exploited in April's $270 million Drift Protocol hack. The proposed change marks a major shift in how the network handles offline approvals, with implications for exchanges and institutional custodians.The proposal, known as SIMD-0723, would retire a mechanism that allows signed transactions to remain valid indefinitely. Attackers reportedly exploited this functionality to execute pre-approved transactions more than a week after obtaining signatures from Drift's security council. Solana wants to kill the feature behind April's $270M+ Drift hack.SIMD-0723, filed Nov 5 by Anza, would retire "durable nonces": signed transactions that never expire. Normal Solana transactions go stale in ~30 seconds. Earliest switch-off: May 5, 2027. pic.twitter.com/VYYttCsvJk- check coula (@checkcoula) November 9, 2026 The move comes as Solana faces another challenge closer to its retail ecosystem. Pump.fun is facing growing community criticism over platform fees, influencer promotions, and allegations of hidden-wallet trading. Together, the developments put renewed attention on security, transparency and trust across Solana's ecosystem.Discover: The Crypto Presales This Q4 2026Solana Moves to Remove the Nonces Feature Behind Drift's $270M ExploitXrp (XRP)24h7d30d1yAll timeNormal Solana transactions use recent blockhashes that expire after 30 seconds. Durable nonces replace those temporary references with stored values, allowing transactions to remain executable until the nonce advances.The feature was designed for legitimate operational needs. Exchanges, custodians, and multisig organizations often require offline signing procedures that take longer than Solana's normal transaction window.However, attackers turned that convenience into an attack vector against Drift on April 1, 2026. They reportedly secured administrative approvals through air-gapped signing systems before allowing the transactions to sit for more than a week.Once submitted, the approvals helped attackers take control of the protocol and drain at least $270 million. Drift subsequently attributed the attack to a North Korean-linked group.Anza contributor Gabe Rodriguez filed SIMD-0723 on November 5. The proposal would require transactions to use recent blockhashes after activation. May 5, 2027, represents the earliest proposed mainnet activation date. The change still requires technical approval and migration planning.Solana is also exploring replacement programs that could support offline signing without relying on durable nonces. These alternatives would introduce different authorization and transaction-failure considerations for custodians.The proposal forces institutional users to reconsider how they authorize transactions across Solana. Meanwhile, questions about trust are becoming harder to ignore elsewhere in the ecosystem.Pump.fun Faces Community BacklashPump.fun has attracted fresh criticism following several developments involving its business model and influencer ecosystem.On November 6, blockchain tracker Lookonchain reported that Pump.fun transferred 76,111 SOL, worth approximately $6.85 million, to Kraken. The movement reignited criticism over platform fees and whether its incentives adequately serve ordinary traders. Pump fun(@Pumpfun) is dumping $SOL again!They just deposited 76,111 $SOL ($6.85M) into #Kraken.In total, https://t.co/TcwYRTArT2 has sold 5,553,833 $SOL($882.4M) at an average price of $158.88.https://t.co/kyztoJLCjt pic.twitter.com/QvzqaR8fGI- Lookonchain (@lookonchain) November 6, 2026 Bubblemaps also accused prominent influencers of using undisclosed wallets to purchase tokens before publicly recommending them. Its investigations estimated $125,000 in combined trading profits and promotional rewards involving influencer Ethan.Separate allegations involving paid streamer collaborations surfaced on November 7. The revelations have intensified questions about transparency within Pump.fun's promotional ecosystem.These controversies involve different problems from Drift's exploit, but they expose a similar challenge: maintaining confidence among participants.Discover: The Crypto Presales This Q4 2026What's The Alternative?That challenge also creates an interesting opportunity for Bitcoin-focused projects ex...