SOLANA PATCHES BUG THAT COULD HAVE ALLOWED ATTACKERS TO MINT AND SWIPE TOKENS

Summary from the TLDR InfoSec newsletter

The Solana Foundation recently patched a zero-day bug in Solana that could have allowed an attacker to mint unlimited Token-22 confidential tokens or steal them from other users. The vulnerability was due to some algebraic components of the ZK ElGamal Proof Program not being included in the hash used to generate a transcript for the Fiat-Shamir Transformation. Solana worked with several security partners to verify the fix and found no evidence of exploitation.