SOON says security review is complete, with protocol and user assets unaffected as mainnet RPC returns

SOON says security review is complete, with protocol and user assets unaffected as mainnet RPC returns

N
News Editor
2026-07-28 03:55:04
Solana Optimistic Network, or SOON, said on July 28 that its review and recovery work tied to a security incident first identified on July 12 has been completed. The project said the incident did not involve vulnerabilities in the SOON protocol, its sequencer, or user-facing smart contracts, and that no user fund losses were found. According to SOON, the issue stemmed from its off-chain operating environment rather than on-chain infrastructure. A review by third-party security firm BlockSec found that an external attacker gained unauthorized access through a misconfigured service and then moved further into part of the internal environment because of insufficient access controls. SOON said the impact was limited to part of its operational infrastructure and related processes. It said on-chain user assets, user smart contracts, and the security of the SOON network were not affected. After the incident, the team paused the sequencer and some services while conducting a full security review. During that period, NFT minting, token claims, and on-chain withdrawals were temporarily shut down. The project said NFT minting and token claims resumed on July 21, while mainnet RPC service and block production resumed on July 27. SOON said the network is now operating normally.
SOONSolanaBlockSecsecurity incidentmainnet RPCpolicy regulation

Solana Optimistic Network (SOON) said on July 28 that the investigation and recovery work tied to a security incident discovered on July 12 has been completed. The project said the incident did not involve any vulnerability in the SOON protocol, its sequencer, or user-facing smart contracts, and that no loss of user funds was found.

SOON said the issue originated from a security problem in its off-chain operating environment. According to an investigation by third-party security firm BlockSec, an external attacker obtained unauthorized access through a misconfigured service and then moved further into part of the internal environment because of insufficient access controls.

Impact was limited to operational infrastructure

SOON said the scope of the incident was limited to part of its operational infrastructure and related processes. It said the event did not involve on-chain user assets, user smart contracts, or the security of the SOON network.

After the incident, SOON paused the sequencer and some services and began a full security review. During that period, NFT minting, token claims, and on-chain withdrawals were temporarily suspended.

Services have resumed in stages

According to the timeline shared by SOON, NFT minting and token claims resumed on July 21. Mainnet RPC service and block production resumed on July 27.

SOON said the network has now returned to normal operations.

This article was originally published by Bit.Fan. For more cryptocurrency news and market insights, visit www.bit.fan.
200

Disclaimer:

The market information, project data, and third-party content displayed on this platform are for industry information sharing only and do not constitute any form of investment advice or return commitment.

Cryptocurrency trading carries high risks. Users should fully assess their risk tolerance and make independent decisions. All profits, losses, and legal responsibilities are borne by the users themselves.