Solana Proposes Retiring Transaction Feature Used in $270M Drift Hack

Solana developers have proposed retiring durable nonces, a feature that allows signed transactions to remain valid indefinitely and was exploited in the April attack that drained at least $270 million from Drift. SIMD-0723, filed by Anza engineer Gabe Rodriguez, would require every transaction to use a recent blockhash and would not activate on mainnet before May 5, 2027, giving custodians and exchanges time to replace offline-signing workflows. Durable nonce traffic represented about 3% of Solana transactions in one measurement period but generated 30% of priority fees, with 555 accounts responsible for 97.5% of usage. The proposal still needs technical approval from Anza and Firedancer engineers, and replacement signing programs carry their own operational risks.