Solana Proposal Targets Never-Expiring Transactions After 270 Million USD Drift Hack

Solana core developers have put forward a sweeping cleanup plan, known as SIMD-0723, that would permanently shut down “durable nonces”—a little-known feature that lets signed transactions sit around forever without expiring—following the 270 million USD Drift Protocol exploit earlier this year. For everyday investors holding SOL around 72 USD, standard wallet transfers will keep working as usual, while behind-the-scenes network rules aim to close a security loophole and stop spam that can bog down the blockchain.

By Keisha Williams | November 15, 2026

Why should a regular crypto holder care about a plumbing tweak like this? When a major app gets drained or validators stall over weird edge cases, confidence in the entire network takes a hit. By cutting out an old shortcut that validators have struggled to police, Solana engineers want to make the network harder to spam and safer for big institutions moving money on-chain.

The Core Concept

Filed on November 5, 2026, by Gabe Rodriguez, an engineer at Solana validator software firm Anza, SIMD-0723 proposes retiring durable nonces across the entire network, according to Unchained Crypto and CoinMarketCap. If approved, every single transaction on Solana would have to carry a fresh network timestamp—effectively banning transactions that never expire.

Think of a normal Solana transaction like a mobile grocery pickup code: if you do not use it within a short window, it expires automatically. A durable nonce, introduced back in 2019, works more like a signed blank check with no expiration date sitting in a desk drawer—someone can hold onto it for days or months and cash it whenever they choose.

• Proposal name and author — SIMD-0723, drafted by Anza engineer Gabe Rodriguez on November 5, 2026.
• Earliest switch-off date — Mainnet activation cannot occur before May 5, 2027, guaranteeing at least a six-month transition window.
• The catalyst — The April 1, 2026 hack of Drift Protocol, which drained between 270 million USD and 285 million USD using pre-signed durable-nonce approvals.
• Everyday user impact — Standard retail wallet transfers are unaffected; only offline vault workflows must adapt.

How It Works Under the Hood

Normally, every Solana transaction must include a “recent blockhash”—a digital time stamp pulled from recent network blocks that proves the request was just created. That time stamp stays valid for roughly 150 blocks, or about 30 seconds at current block speeds, before validators throw it out so old requests cannot be replayed later.

To bypass that 30-second clock, durable nonces store a special reusable code inside a dedicated tracking account on the blockchain. Because that code does not age out with the clock, a transaction signed against it stays valid indefinitely until it finally hits the network and updates the stored code to a fresh value.

Supporting that exception forces validator software—including teams building Agave and Firedancer—to run a separate set of checking rules alongside normal traffic. According to CoinMarketCap and MLQ.ai, those special pathways have repeatedly introduced tricky bugs, network stalls, and cheap spam attacks where bots sign multiple competing requests against one nonce without paying until one lands.

Real-World Applications

Durable nonces were built for a real headache: big crypto custodians, exchanges, and corporate treasuries often keep their private keys offline in air-gapped vaults. Getting several executives across different time zones to approve and upload a withdrawal takes far longer than 30 seconds, so teams leaned on never-expiring transactions to bridge the gap.

That same flexibility proved disastrous on April 1, 2026, when attackers linked by security firms like Chainalysis and TRM Labs to North Korean state hackers drained Drift Protocol, Solana’s largest decentralized perpetual exchange. After six months of posing as a trading firm to gain trust, the attackers tricked security council signers into pre-signing durable-nonce transactions, held those valid signatures for more than a week, and wiped out over 50 percent of Drift’s locked funds—roughly 270 million USD to 285 million USD—in about 12 minutes, according to Cryptonews and Chainalysis.

Under SIMD-0723, custodians and multi-signature vaults will need to switch from built-in nonce accounts to on-chain offline-signer tools like Anza’s Programmatic Signer or Blueshift’s Vector. Instead of signing a timeless transaction directly, a cold-storage key signs a plain instruction note offline, and an online courier—called a relayer—wraps that note inside a normal 30-second transaction and pays the fee, while the on-chain program checks the signature before moving funds.

Scalability & Limitations

Retiring durable nonces solves two structural headaches at once. First, trimming special-case checks across Agave and Firedancer shrinks the surface area for bugs that can knock validators out of sync. Second, forcing every request onto a tight 30-second timer makes it much harder for spam bots to queue up pre-signed transaction floods ahead of busy token launches.

Still, the change asks institutional builders to do real engineering work on a deadline. Exchanges, hardware-wallet providers, and treasury teams that rely on air-gapped approvals must rewrite their signing pipelines around tools like Programmatic Signer or Vector—and under the draft proposal, existing nonce accounts will still let owners withdraw funds or change controllers, even after creating or advancing new nonces is switched off.

There is also a clear trade-off in shifting offline signature checks out of Solana’s core rules and into add-on smart contracts. While keeping core validator code lean reduces network-wide risks, every third-party signing program still has to earn institutional trust through careful audits before billions in cold-storage assets depend on it.

The Future Horizon

The timing of this debate carries extra weight as Solana’s flagship Breakpoint 2026 conference opens in London from November 15 to November 17, 2026, bringing institutional payment firms and banks face to face with core engineers. As traditional finance explores using Solana for tokenized assets and payments, proving that the base network can close exploit vectors without breaking institutional custody tools is front and center.

I checked the timeline details across the SIMD-0723 coverage: the proposal is still an unmerged draft with no final activation block yet, only a minimum six-month runway that bars any mainnet switch-off before May 5, 2027. Before any code ships, core client teams must review and approve the draft, giving custodians and wallet makers months of lead time to test replacements and move off legacy nonce accounts.

Keisha Williams’s take

Stripping out never-expiring transactions trims a messy edge case that has tripped up Solana validators and handed attackers a delayed-trigger weapon, which is why I back the cleanup. Client sign-off from Anza and how quickly major custodians migrate before May 5, 2027 will show me whether the ecosystem can retire this shortcut smoothly. If replacement programs like Programmatic Signer or Vector uncover fresh smart-contract bugs in testing, keeping the original system would look safer after all.

The cryptocurrency market remains highly volatile. This article is for informational purposes only and does not constitute financial advice.