Representatives of Laine, the validator of the Solana blockchain, announced the elimination of a critical vulnerability in the main network. Information about the patch was published only after the update.
On August 7, Solana Foundation technical support contacted major network operators through private channels to keep the emergency update secret. On August 8, blockchain validators, including Laine, received another notification from the Solana Foundation, containing instructions on how to apply a fix for the critical vulnerability. The patch was posted to a GitHub repository by an engineer named Anza.
Laine said that the silent upgrade protected the network’s supermajority, and when 70% of validators had upgraded, they made the information public.
“The fact that the issue was discovered and fixed in a timely manner is a testament to the highly professional efforts of Anza, Solana Foundation, Jump/Firedancer, Jito and other teams,” Laine said.
The secrecy of the Solana team’s actions in Laine was explained by the fact that the patch contained complete information about a critical vulnerability in the network, and hackers could use this to attack.
Earlier, the administration of the decentralized community for Monkey Business Gen2 NFT holders announced the start of an internal investigation into cases of transferring validators’ income to the DAO treasury balance.
