Solana Durable Nonces: The Transaction That Never Expires

Originally published on xroot.dev. On 1 April 2026, the perpetuals protocol Drift lost about $285 million. The attacker did not break a contract or steal a key from a server. Over several weeks they phished two of the five signatures on the protocol's security council, and then, at a time of their choosing, submitted two transactions that had been...