A Year in Review: Solana Hacks
summary
Timeline shows ~ $500M+ lost on Solana with Wormhole ~$320M, Cashio ~$60M, Nirvana under $10M, Mango ~ $100M and Solend ~$1.2M. Nirvana exploit uses a price hint set to zero to skew swap pricing, discovered without decompiling (research mentions Binary Ninja techniques). Mango and similar failures are pure market-manipulation: a low‑liquidity token is listed, an attacker spent low six figures to pump price and drain reserves. Closed ecosystems aren’t safe — many projects are closed source yet vulnerable; auditors must evaluate economic parameters.
AI-written summary · about
chapters (4)
related talks
46mThe State of Blockchain Security - 2023 Edition
23mWhere are Your Keys
28mCross-Contract Ricochet Attacks & Off-Chain-On-Chain Manipulation of Billion Dollar NFT Collections
15mThe State of Solana MEV
40mThe Lunacy of Web3
36mDeciphering Web3 Security: Implications and Innovations
36mSmall Leaks, Billions Of Dollars: Practical Cryptographic Exploits That Undermine Crypto Wallets
09mHow to Find Attackers and Improve Your Security Posture