Solana Fixes Critical Bug Allowing Unlimited Token Minting

By: bitcoin ethereum news|2025/05/05 15:30:01
0
Share
copy
Recently, Solana faced a serious issue. A security vulnerability that allowed attackers to mint unlimited tokens or even withdraw tokens from other users’ accounts without permission was discovered. However, after fixing the bug, investors criticized Solana. Let’s explore the reason behind this controversy. Solana Quietly Patches Vulnerability: Hero or Controller? Solana recently released a report revealing a vulnerability in its ZK ElGamal Proof program. This native program verifies the correctness of complex zero-knowledge proofs, ensuring that encrypted balances in accounts and transactions are valid. The bug affected tokens using the Token-2022 standard. The vulnerability allowed attackers to trick the system. It made the system believe that illegal actions, such as minting unlimited tokens or withdrawing from others’ wallets, were valid. In other words, if left undetected, bad actors could have printed infinite money or stolen digital assets without being noticed. “This vulnerability only affects Token-22 confidential tokens and allows an attacker to perform unauthorized actions such as minting unlimited tokens or withdrawing tokens from any account,” Solana stated. Fortunately, Solana quickly fixed the issue. They updated the software and re-tested it with the help of security research teams such as Asymmetric Research, Neodyme, and OtterSec. Most importantly, no reports indicated the vulnerability had been exploited before it was patched. Although Solana acted quickly, its handling of the situation sparked mixed reactions. A developer named Fede’s intern from LambdaClass defended Solana. He argued that those criticizing the platform didn’t understand the technology. He also claimed that the response would likely have been the same if a similar incident had occurred on Ethereum or Bitcoin. In 2018, the Bitcoin network experienced a serious inflation bug. Developers from Bitcoin Core had to quietly contact mining pools to fix the issue before informing the public. Still, many voiced concerns about Solana’s transparency and decentralization. For example, investor Clouted expressed alarm over the secretive patch. Solana applied the fix quietly and only disclosed it afterward. This raised fears that if validators could coordinate privately to fix bugs, they might also collaborate to censor transactions or alter blockchain data—something a decentralized system should not allow. “Am I hearing this right? There was a zero-day on Solana mainnet and >70% of the validators privately colluded to upgrade and patch the critical bug before it was even made public,” Clouted said. Another user also raised concerns about validators “colluding” to upgrade the system secretly. These comments reflect broader community worries that Solana may be operating more centralized than users expect from a blockchain. This vulnerability serves as a wake-up call—not just for Solana but for the entire blockchain industry. Although the issue was fixed in time, it highlights the ongoing challenge of balancing security, transparency, and decentralization. Disclaimer In adherence to the Trust Project guidelines, BeInCrypto is committed to unbiased, transparent reporting. This news article aims to provide accurate, timely information. However, readers are advised to verify facts independently and consult with a professional before making any decisions based on this content. Please note that our Terms and Conditions, Privacy Policy, and Disclaimers have been updated. Source: https://beincrypto.com/solana-fixes-critical-bug/

You may also like

Tiger Research: What AI services do cryptocurrency companies offer?

Cryptocurrency giants like Binance and Coinbase have fully launched an AI defense battle: Driven by FOMO sentiment, leading platforms are accelerating the deep integration of AI agents into core businesses such as trading, security, and payments.

The war not only drives up oil prices but also causes Circle's stock price to soar

High interest rate expectations combined with the explosive growth of stablecoin infrastructure have led to Circle's stock price doubling in five weeks against the trend: Understanding the dual game of "macro interest rate trading" and "global payment foundation" behind the surge in one article.

When agents become consumers, who will rewrite the underlying logic of internet commerce?

Thirty years ago, due to the high cost of micropayments, the internet had no choice but to adopt an advertising model. Today, the technical threshold for micropayments is nearly zero, but trust has become the most expensive luxury. Whoever can bridge this gap will dominate the next generation of int...

AI Agents in Action Summit: March 31, Hong Kong Cyberport, focusing on the deep waters of AI implementation

Tomorrow, Hong Kong Cyberport will grandly open. The "AI Agents in Action" summit gathers top experts, directly addressing the real evolution of AI Agents from conceptual celebration to productization and large-scale commercial implementation.

29 Days In, What Are America’s Options on Iran?

The key is not in ground invasion but in the combination of striking capability and governance.

Flash Crash Down 97%+ with Ongoing Unlocking, WLD Completes $65 Million Off-chain Funding: Who Is Still Buying?

In the current deep bear market environment, being able to complete multi-million dollar token trades is quite rare.

Popular coins

Latest Crypto News

Read more