Solana’s core developers have submitted a protocol amendment, SIMD-0723, that would eliminate the durable nonce transaction mechanism after it was used to facilitate a $270 million theft of the Drift Protocol in April 2026. The proposal, filed on November 5, targets a feature that lets signed transactions remain valid indefinitely, a convenience for custodians that attackers turned into an exploit. At the same time, the Solana ecosystem is dealing with heightened criticism of the Pump.fun trading platform over fees, influencer promotions, and alleged hidden‑wallet trading.

SOL / USD
Source: CoinGecko. Prices are indicative.

Why durable nonces were removed

Durable nonces replace Solana’s standard 30‑second blockhash reference with a stored value, allowing a transaction to be signed offline and executed later. According to CryptoNews, the Drift attackers obtained administrative signatures through an air‑gapped signing process, then waited more than a week before broadcasting the transactions, seizing control of the protocol and draining at least $270 million. The exploit prompted Drift to attribute the attack to a North‑Korean linked group. SIMD-0723 would require all future transactions to include a recent blockhash, effectively disabling the indefinite‑validity window.

Impact on exchanges and custodians

The durable nonce feature was widely used by exchanges, institutional custodians and multisig organizations that need offline signing workflows longer than Solana’s typical transaction window. Removing it forces these participants to adopt alternative offline‑signing solutions or redesign their operational processes. Solana’s developers are reportedly exploring replacement programs that could preserve offline signing capabilities without the security risks associated with durable nonces, though the details remain under discussion.

Pump.fun backlash adds pressure on Solana

While the protocol change addresses a technical vulnerability, Solana’s broader ecosystem faces reputational challenges from the Pump.fun platform. Lookonchain data showed Pump.fun moved 76,111 SOL (about $6.85 million) to Kraken on November 6, reigniting complaints about platform fees and the fairness of its incentive model. Influencer‑focused investigations by Bubblemaps alleged undisclosed wallet activity that generated roughly $125,000 in combined trading profits and promotional rewards for a prominent promoter, Ethan. Additional allegations of paid streamer collaborations surfaced on November 7, intensifying calls for greater transparency.

What to watch next

The earliest activation date for SIMD-0723 is set for May 5, 2027, pending technical approval and migration planning. Stakeholders should monitor Solana’s forthcoming technical discussions on alternative offline‑signing mechanisms and any timeline adjustments. In parallel, the community is likely to demand clearer disclosure standards from platforms like Pump.fun, especially regarding influencer compensation and fee structures. Finally, the outcome of these reforms could influence institutional confidence in building on Solana, affecting future DeFi and NFT projects that rely on its high‑throughput architecture.