Check If Your Solana Wallet Is Exposed to the Drift Hack Attack Vector

3 days after the Drift Protocol $285M hack, one question keeps coming up: does my wallet control durable nonce accounts that could be used against me?

There is now a way to check. The /nonce command on @SolGuard_Bot scans any Solana address and lists every durable nonce account it controls.

Why Durable Nonces Are Dangerous

Normal Solana transactions expire in about 90 seconds. Durable nonces bypass this. A transaction signed with a nonce value stays valid forever. The Drift attackers collected multisig signatures over weeks and drained $285 million in 12 minutes.

Every nonce account has an authority wallet. If your wallet is the authority on any nonce accounts, pre-signed transactions could execute against you at any future time without warning.

How to Check Right Now

Open @SolGuard_Bot on Telegram and send: /nonce YOUR_WALLET_ADDRESS

A clean result means you are not exposed. Any nonce accounts found means you should rotate your nonce authority immediately.

Every Solana Multisig Should Run This Check Today

The Drift attack is now a proven template. Before April 1 almost nobody was auditing durable nonce exposure. SolGuard queries the Solana System Program directly to find all nonce accounts where your wallet is listed as the authority — the same check a security auditor would do manually.

Free to use. Premium real-time monitoring at $99/month in USDC or SOL.

Telegram bot: @SolGuard_Bot | https://solguard-security-monitor.surge.sh