Solana Bug Bounty Ignored Previously Disclosed Clock Attack
A 50,000 SOL security contest excluded legacy Proof of History and TowerBFT paths despite earlier warnings.
Advertising disclosure: we may earn a commission when you join an operator via links on this page, at no cost to you. This never dictates our ratings. How we make money
Key takeaways
- Solana's 50,000 SOL security contest excluded legacy PoH and TowerBFT paths.
- A clock attack disclosed months earlier fell outside the competition's scope.
- No public paper-specific implementation review has been released.
Solana recently ran a 50,000 SOL security contest, but they conveniently left out a known clock attack vector disclosed months earlier.
Critical Consensus Paths Out of Scope
Security competitions exist to catch hidden flaws before hackers do. Yet Solana explicitly ruled its legacy Proof of History (PoH) and TowerBFT consensus paths out of scope for the event.
Because those core components were off-limits, white-hat security researchers couldn't target them for bounties. To make matters worse, Solana hasn't made any paper-specific implementation review public to show how they're handling those risks.
Why it matters
A bug bounty only protects the code it actually covers. If you hold SOL or use the network, keeping core consensus mechanisms out of high-stakes security contests leaves dangerous blind spots open to real-world exploits.
Source: CryptoSlate
Top Crypto Casinos Right Now
🇦🇺 Showing sites that accept players from Australia Change country
Advertising disclosure: we may earn a commission when you join an operator via links on this page, at no cost to you. This never dictates our ratings. How we make money
More info Less info
Why we chose it: A US-oriented casino that turns away only New Jersey. The cashier takes crypto, but the site publishes fewer specifics than any operator we list.
- KYC
- Required
Restricted countries: New Jersey (US).
More info Less info
Why we chose it: One of the widest crypto line-ups of any book we list - seven coins with fast payouts - aimed squarely at Asia and Latin America rather than the US or Western Europe.
- Licence
- Curacao
Restricted countries: Austria, Belgium, Bulgaria, Cyprus, Czechia, Germany, Denmark, Estonia and 21 more.
More info Less info
Why we chose it: Built for American bettors, priced accordingly. Biggest welcome bonus of the five, attached to the heaviest rollover of the five.
- Online since
- 1994
- Licence
- Curaçao
- Payout time
- 24–48 hours (crypto)
- Wagering
- 18x sportsbook / 30x casino
- KYC
- Required
Restricted countries: Belgium, Costa Rica, Croatia, Curaçao, Aruba, Sint Maarten, Caribbean Netherlands, France and 11 more.
Sofia Marek
Sofia reviews exchanges and crypto casinos, focused on fees, safety and what actually reaches the player.
