Solana averts catastrophe with quiet patch of major token vulnerability

By: bitcoin ethereum news|2025/05/05 17:00:01

The Solana Foundation has revealed that a critical vulnerability affecting its Token-2022 standard was quietly patched in April, averting what could have been a catastrophic breach. If exploited, the flaw would have allowed attackers to mint an unlimited number of tokens or withdraw funds from any account without authorization. According to the post-mortem, the issue was first reported on April 16 and fixed within two days. The fix was coordinated by core development teams from Anza, Jito, and Firedancer, with additional support from security firms Asymmetric Research, Neodyme, and OtterSec. Understanding the Solana vulnerability According to the Foundation, the bug affected a specific feature in Solana’s Token-2022 framework known as “confidential transfers.” This feature relies on zero-knowledge cryptography, specifically the ZK ElGamal proof system, to enable private transactions. However, a missing algebraic component in a hash used for cryptographic verification left the door open for manipulation. This flaw allowed a malicious actor to forge a valid cryptographic proof. With such a fake proof, they could mint new tokens or drain existing accounts without detection. Although no exploit was observed, the revelation caused some market jitters. Data from CoinGecko shows that the combined value of these tokens dropped by around 5%, settling at $16.1 million after the news broke. Community reaction While the vulnerability was handled swiftly, Solana’s decision to keep the issue under wraps drew mixed reactions. Critics argued that quietly coordinating such a fix reflects an uncomfortable level of centralization within the network. One community member questioned whether validators could use similar coordination to carry out or cover up harmful actions in the future. Others, however, defended the approach. Industry veterans, including developers from Bitcoin and Polygon, pointed out that silent patches are a standard best practice when dealing with zero-day bugs. These behind-the-scenes efforts, they argued, prevent real-time exploits while teams work on a secure fix. Hudson James, a VP at Ethereum layer-2 network developer Polygon Labs, said: “This is totally fine. Bitcoin, Zcash, and Ethereum have all had instances where the core devs needed to privately plan a secret bug fix. A good chain culture means having mature devs who can accomplish stealth fixes.” Solana co-founder Anatoly Yakovenko also weighed in, stating that validator coordination is not unique to his blockchain network. He compared the process to similar consensus-building mechanisms on Ethereum, involving validators like Lido, Binance, Coinbase, and Kraken. Source: https://cryptoslate.com/solana-averts-catastrophe-with-quiet-patch-of-major-token-vulnerability/

On March 4, 2026, DDC Enterprise Limited (NYSE American: DDC) today announced preliminary, unaudited full-year financial performance for the year ended December 31, 2025. The company expects to achieve record revenue and record positive adjusted EBITDA, primarily driven by continued growth in its core consumer food business and overall margin improvement. The final audited financial report is expected to be released in mid-April 2026.

2025 Full-Year Financial Highlights

Revenue: Expected to be between $39 million and $41 million, reaching a new company high.

Organic Growth: Excluding the impact of the company's strategic contraction of its U.S. operations, core revenue is expected to grow 11% to 17% year over year.

Gross Profit Margin: Expected to be between 28% and 30%, reflecting continued operational efficiency improvements.

Adjusted EBITDA: The company expects to achieve a positive full-year result in 2025, a significant improvement from a $3.5 million loss in 2024, mainly due to rigorous cost controls and a higher-margin sales mix.

Core Consumer Food Business Performance

In 2025, DDC's core consumer food business maintained strong operational performance.

The company also disclosed Core Consumer Food Business Adjusted EBITDA, a metric that further excludes costs related to its Bitcoin reserve strategy and non-cash fair value adjustments related to its Bitcoin holdings from adjusted EBITDA to more accurately reflect the core business performance.

In 2025, Core Consumer Food Business Adjusted EBITDA is expected to be between $5.5 million and $6 million.

Bitcoin Reserve Update

In the first half of 2025, DDC initiated a long-term Bitcoin accumulation strategy, holding Bitcoin as its primary reserve asset.

As of December 31, 2025: The company holds 1,183 BTC.

As of February 28, 2026: Holdings increased to 2,118 BTC

Today's additional purchase of 65 BTC brings the company's total holdings to 2,183 BTC

DDC Founder, Chairman, and CEO Norma Chu stated, "We are proud to have closed 2025 with record revenue and positive adjusted EBITDA, demonstrating the steady growth of the company's consumer food business and the ongoing improvement in profitability. We are building a disciplined, growth-oriented food platform and strategically allocating capital to Bitcoin assets with a long-term view, aligning with our core beliefs. We believe that this dual-track model of 'Steady Consumer Business + Strategic Bitcoin Reserve' will help DDC create lasting long-term value for shareholders."

Adjusted EBITDA Definition
For the full year 2025, the company defines "Adjusted EBITDA" (a non-GAAP financial measure) as: Net income / (loss) excluding the following items:· Interest expense· Taxes· Foreign exchange gains/losses· Long-lived asset impairment· Depreciation and amortization· Non-cash fair value changes related to financial instruments (including Bitcoin holdings)· Stock-based compensation

About DDC Enterprise Limited

DDC Enterprise Limited (NYSE: DDC) is actively implementing its corporate Bitcoin Treasury strategy while continuing to strengthen its position as a leading global Asian food platform.

The company has established Bitcoin as a core reserve asset and is executing a prudent, long-oriented accumulation strategy. While expanding its portfolio of food brands, DDC is gradually becoming one of the public company pioneers in integrating Bitcoin into its corporate financial architecture.

Uncovering YZi Labs 229 Investment: Over 18% of the portfolio is already inactive, with an average project transparency score of 78

In terms of strategic direction, YZi Labs has begun to extend into areas such as AI and stablecoins, but overall it is still in the layout and validation stage.

Trump Backs Crypto Bill, SEC Halts Leveraged ETF, What Is the English-Speaking Crypto Community Talking About?

What Was Hot in the Last 24 Hours Among Expats?

OpenClaw Floods Into Polymarket, Some Making Tens of Thousands Per Month

Are you ready to venture into Polymarket and dive into the shrimp farming craze?

Understanding Trump's "Warfare Playbook": Ten Signals Investors Must Know

Debriefing Trump's series of conflicts over the past year, this article outlines ten stages of Trump's conflict strategy, revealing the underlying logic between war, market fluctuations, and eventual negotiation.

Iranian Missile Heading Toward UAE, Claude Also Within Range

On March 1st, an Iranian missile struck an Amazon data center in the UAE. On the same day, Claude experienced a worldwide outage.

Successive Core Team "Heroes" Depart, Has Aave's DAO Dream Crumbled?

「This is not a matter of right or wrong, but rather a situation where existing governance mechanisms have not provided an effective resolution when interests and positions are misaligned.」

Is This the Year of the Robot? A Deep Dive into Robotics Projects

What are some noteworthy projects in the Robotic Race track?

When AI Takes Over Money: Bitcoin Becomes the "First Choice," Fiat Is Left Out

AI's view on "what makes a good currency" is already quite consistent.

AI Trading in Live Markets: 4 Lessons From a WEEX Hackathon Top 10 Finalist

AI trading meets real markets. Explore 4 lessons from a WEEX Hackathon Top 10 finalist on surviving volatility, trusting AI models, and building smarter crypto trading systems.

MegaETH Co-founder: 48 Hours After Leaving Dubai, I Reassessed the Entire Crypto Space

In an era of technological upheaval, rather than pursuing the "legitimacy" co-opted by power, it is better to sharpen the blade and build parallel systems that truly expand individual sovereignty.

Web3 Winter Mass Exodus: Resignations, Closures, Transformations, and Acquisitions

The intense collision between technology and capital, products and markets, vision and reality, each story reflects the confusion and unwillingness of the market participants.

March 4th Market Key Intelligence, How Much Did You Miss?

Taking Stock of Crypto's Washington Power Players: Who is Advocating for US Crypto Regulation?

These institutions have jointly defined the industry's underlying values, marking the U.S. crypto industry's shift to a "professionalized, ecological, and refined" era of policy gamesmanship.

DDC Enterprise Limited Announces 2025 Unaudited Preliminary Financial Performance: Record Revenue Achieved, Bitcoin Treasury Grows to 2183 Coins