Solana developers are weighing a proposal to permanently remove a built-in network feature that attackers exploited to drain at least $270 million from a major decentralized finance protocol earlier this year.

The proposal, SIMD-0723, was filed on November 5, 2026, by Gabe Rodriguez of Anza, one of the core development teams building Solana's software. It targets "durable nonces," a mechanism that allows a signed transaction to remain valid indefinitely rather than expiring after a short window. If adopted, the change could reshape how custodians and large institutions interact with the blockchain.

Why Solana Is Reconsidering Durable Nonces

Under Solana's default rules, a signed transaction carries a short expiry. A durable nonce suspends that clock: a pre-signed transaction can sit unused for months and still execute when it is finally submitted. That convenience, designed for workflows where real-time approval is impractical — such as treasury management and cold-storage operations — is also the risk.

As of November 9, 2026, the proposal had zero approvals. It requires sign-off from at least one engineer each at Anza and Firedancer, the validator client built by Jump Crypto, according to Unchained Crypto. The earliest the change could reach Solana's mainnet is May 5, 2027.

Although durable nonces are a niche feature, they punch well above their weight in network economics. They account for roughly 3% of Solana's transaction volume but about 30% of all priority fees, according to research by Max Resnick cited by CoinDesk. Just 555 accounts sent 97.5% of all durable nonce transactions, meaning a tiny group of institutional users generates a disproportionate share of Solana's fee revenue.

How the $270 Million Hack Put the Feature in Focus

Renewed scrutiny follows the April 1, 2026 attack on Drift Protocol, a decentralized exchange built on Solana, which was drained of at least $270 million. According to CoinDesk's original reporting on the incident, the attackers did not exploit a code bug in the traditional sense. Instead, they exploited the durable nonce feature itself.

The attack required patience. According to Crypto Briefing, the attackers spent six months posing as a quant trading firm in a social engineering campaign. That access allowed them to obtain pre-signed admin transactions from Drift's Security Council. Because those transactions used durable nonces, they remained valid long after they were signed. The attackers then submitted them more than a week later to drain the protocol.

The exploit is suspected to be the work of a North Korean state-affiliated group, specifically UNC4736, also known as the Lazarus Group, according to Crypto Briefing. More than $230 million in USDC was bridged to Ethereum via Circle's CCTP across over 100 transactions after the hack, and over 50% of Drift's total value locked was wiped out.

CoinLineup previously reported that a separate Solana trading-bot incident drained nearly $1 million from 49 wallets.

What Removing the Feature Could Mean for Users and Institutions

Eliminating durable nonces would create real friction for large Solana users. The mint authorities for USDC and USDT, which manage the creation of the two largest stablecoins on the network, are among the notable institutional users of durable nonces who would need to migrate, Unchained Crypto reported. These are organizations that rely on pre-signed transactions precisely because human approval of every transaction in real time is not practical.

Michael Gutkin of Fireblocks, a major institutional crypto custody provider, addressed the timeline directly.

"Durable nonce deprecation seems like the right direction," Gutkin said. "If accounts had to be migrated with no compatibility bridge, 12 months is the minimum we believe is feasible at institutional scale."

The proposal's minimum activation date of May 5, 2027 gives roughly six months from the November 5 filing for affected parties to prepare — a window Fireblocks considers tight but feasible with a compatibility bridge in place.

Two replacements have been proposed to fill the gap durable nonces currently serve. Anza has put forward the Programmatic Signer, while a team called Blueshift has proposed a tool called Vector. As of November 9, 2026, Anza's replacement was still marked "under construction," meaning institutions would be migrating to tooling that does not yet exist in its final form.

For regular Solana users who do not hold SOL in an institutional custody setup, SIMD-0723 would likely be invisible in day-to-day use. Standard wallet transactions do not use durable nonces. The change would be felt most by developers, custodians, and protocols that rely on pre-signed admin keys — exactly the category of user the Drift attackers targeted.

What Comes Next

The governance decision around SIMD-0723 will determine whether the network accepts the migration cost now in exchange for closing an attack surface that cost the ecosystem a quarter-billion dollars in a single day. The vote is not yet scheduled, and the replacement tooling is not yet ready.

What to watch: whether Anza and Firedancer engineers formally approve the proposal, and whether the Programmatic Signer ships in time to give institutions a viable migration path before any deprecation deadline.

If passed, the proposal would represent one of the most significant protocol-level security changes in Solana's history. It removes a tool that made certain operations more convenient — specifically because that convenience was turned into a weapon.

Disclaimer: This article is for informational purposes only and does not constitute financial or investment advice. Cryptocurrency and digital asset markets carry significant risk.