Anza specialists have identified a bug in ZK ElGamal Proof - it could allow attackers to create fake proofs and issue an unlimited number of Token-2022 tokens or write off funds from accounts.
On April 17, the Solana Foundation and Jito teams began sending out the patch to validators. Most of them were updated before April 18.
The bug did not affect user assets — no exploits were recorded.
Anatoly Yakovenko, co-founder of the project, noted that fixing the bug without publicity is "coordinated work with >70% of validators," similar to the practice in Ethereum.
Now there are 1218 active validators in the Solana network, staking covers 65% of the SOL supply. Ethereum has 17,126 nodes, 28% of ETH is staked.
Fidelity and JPMorgan have previously called Solana a real competitor to Ethereum.