Solana developers have fixed a zero-day vulnerability that could have allowed some tokens to be minted infinitely

Mars Finance News, on May 5th, Solana developers carefully patched a critical zero-day vulnerability that could have allowed attackers to mint unlimited tokens and steal funds from user accounts. The vulnerability was discovered on April 16, 2025, affecting the core cryptographic components of Token-2022 and ZK ElGamal Proof programs, both of which are core to Solana's confidential token architecture. To fix the vulnerability, Solana's core development teams (Anza, Firedancer, and Jito) worked closely with renowned blockchain security audit firms such as OtterSec, Asymmetric Research, and Neodyme. These teams quickly took action to investigate the vulnerability and develop a secure fix. The patch was privately distributed to a selected group of validators starting from April 17th. Within 24 hours, over 70% of network stakers adopted the fix, exceeding the absolute majority threshold required for network security. The vulnerability was only publicly disclosed after the vast majority of validators implemented the update, thereby minimizing the risk of exploitation. (Finance Feeds)