A proposal to remove durable nonces from Solana, the transaction feature that attackers used in the April theft of at least $270 million from the Drift exchange, was filed on November 5, 2026, according to a CoinDesk report published November 9. CoinDesk says the earliest the change could activate is May 5, 2027, and that migration requirements could push it later.

What is proposed

  • CoinDesk reports that durable nonces let a signed transaction stay valid for weeks, instead of expiring after the roughly 30-second window that standard blockhashes allow.
  • The proposal, SIMD-0723, was filed by Gabe Rodriguez of Anza. It still needs technical sign-off from at least one engineer at Anza and one at Firedancer, the validator software built by Jump, according to CoinDesk.
  • The Solana Foundation’s deprecation page currently reads “No date set,” according to the article.

Why, according to the proposal

CoinDesk reports that attackers obtained approvals signed in advance, let those transactions sit for more than a week and used them on April 1 to drain at least $270 million from Drift. Drift later blamed a North Korean state-affiliated group, according to the article. The proposal also cites past problems, including a 2022 incident that halted the network’s mainnet for about 4.5 hours, and spam: in one June measurement period, durable-nonce transactions made up about 3% of traffic but paid 30% of priority fees, and, per researcher Max Resnick’s data, 555 accounts sent 97.5% of them.

Who would be affected

Custodians and exchanges that sign offline on air-gapped machines would need replacements, according to CoinDesk, which names Anza’s Programmatic Signer and Blueshift’s Vector as options. The proposal warns that “a failed execution can leave an authorization usable,” so a failed submission does not revoke approval.

What the report does not include

The article does not say whether the engineers whose sign-off is needed support the proposal, and it does not give a vote or timeline for approval.

Sources and notes

This post is based on CoinDesk’s article by Shaurya Malwa, edited by Omkar Godbole, published November 9, 2026. Lens did not read SIMD-0723 or the Solana Foundation’s page, so the proposal’s contents are as CoinDesk described them. Lens did not contact Anza, Jump, Drift or the Solana Foundation.

Image: Close-up of a dark metal chain on a grey surface, by Kaley Dykstra via Wikimedia Commons, released under CC0 1.0; cropped. Stand-in photo; it does not show the events described.