Solana developers are weighing a draft proposal that would kill off the network's durable nonces transaction feature, a mechanism that played a central role in the $270 million Drift hack. The proposal sets no earlier than May 5, 2027, for the feature's removal, giving the ecosystem roughly three years to adjust to its disappearance.
The change would be felt most keenly by custodians and other services that sign transactions offline, since durable nonces let them prepare and authorize transfers without needing a recent blockhash. Those operators would have to rebuild how they move coins on Solana.
What durable nonces did and why Drift changed the calculus
Durable nonces were designed to let a transaction be signed ahead of time and submitted later, without the usual expiry window that comes from Solana's blockhash system. For custodians, that made it easier to coordinate offline signing workflows and move funds without keeping a live connection to the chain.
The Drift hack turned that convenience into a liability. The $270 million exploit relied on the feature, which put a spotlight on the trade-off between operational flexibility and attack surface. The draft proposal doesn't spell out how the hack worked, but the link is enough to have pushed the feature onto the chopping block.
The May 2027 deadline and what it means for offline signers
The date matters. Setting removal no earlier than May 5, 2027, gives custodians time to redesign their systems, but it also puts a firm horizon on work that many may have treated as optional. Offline signing is a core part of how institutional holders manage Solana assets, and durable nonces were one of the few ways to make that work smoothly.
Without the feature, custodians would need another way to handle pre-signed transactions. The proposal doesn't say what that replacement looks like, and it's not clear whether the ecosystem has a ready alternative or whether each custodian will have to build its own workaround.
The proposal is still a draft, and the details are thin
As a draft, the proposal hasn't been finalized, and the timeline could shift. What's on the table is a removal date, not a migration plan. That leaves open questions about how the network will support the offline signing workflows that durable nonces currently enable.
The $270 million Drift hack is the immediate backdrop, but the proposal's reach goes beyond one incident. It touches any service that relies on pre-signed transactions, from custodians to possibly other infrastructure providers that haven't yet spoken up.
What happens between now and 2027
The next step is for the proposal to move through Solana's governance and development process, where the May 2027 date and the lack of a replacement mechanism are likely to draw scrutiny. Custodians that sign offline will be watching closely, since they're the ones who would have to rebuild their coin-moving operations.
For now, the feature stays live. The draft sets a date, not a switch, and the intervening years will determine whether the ecosystem can retire durable nonces without disrupting the custodians that depend on them.
