SOON says security review is complete, with protocol and user assets unaffected as mainnet RPC returns

Solana Optimistic Network, or SOON, said on July 28 that its review and recovery work tied to a security incident first identified on July 12 has been completed. The project said the incident did not involve vulnerabilities in the SOON protocol, its sequencer, or user-facing smart contracts, and that no user fund losses were found. According to SOON, the issue stemmed from its off-chain operating environment rather than on-chain infrastructure. A review by third-party security firm BlockSec found that an external attacker gained unauthorized access through a misconfigured service and then moved further into part of the internal environment because of insufficient access controls. SOON said the impact was limited to part of its operational infrastructure and related processes. It said on-chain user assets, user smart contracts, and the security of the SOON network were not affected. After the incident, the team paused the sequencer and some services while conducting a full security review. During that period, NFT minting, token claims, and on-chain withdrawals were temporarily shut down. The project said NFT minting and token claims resumed on July 21, while mainnet RPC service and block production resumed on July 27. SOON said the network is now operating normally.