Solana Foundation launches STRIDE and SIRN DeFi security programs

The new program adds public protocol reviews, continuous threat monitoring, and incident response support, with Drift’s exploit adding fresh urgency to the rollout.

Share

Add us on Google by Estefano Gomez Apr. 6, 2026

Solana Foundation has launched a broader security expansion for its DeFi ecosystem, introducing STRIDE and the Solana Incident Response Network, or SIRN, as part of a wider push to strengthen protocol standards, monitoring, and crisis response across the network.

Solana was built for security. As the ecosystem scales, so does our investment in the tools, standards, and support.

Today that commitment deepens with a new security program, active monitoring, formal verification for top protocols, and a new crisis response network.

Learn… pic.twitter.com/17M4TgqpsQ

— Solana Foundation (@SolanaFndn) April 6, 2026

The initiative, led with Asymmetric Research, includes public security evaluations, continuous threat monitoring for protocols with more than $10 million in TVL that pass review, and foundation-funded formal verification for protocols with more than $100 million in TVL.

Solana Foundation says STRIDE and SIRN build on security resources it has been rolling out over the past few years, including ecosystem support tools and monitoring services already available to builders at no cost.

The rollout comes less than a week after Drift Protocol suffered a $286 million exploit, which Elliptic said showed indicators consistent with prior DPRK linked operations. Elliptic also cited preliminary findings that pointed to compromised administrator private keys, reinforcing the idea that DeFi failures often extend beyond smart contract code and into governance, access control, and operational security.

In Solana’s own description, the program is designed not just to review code, but to evaluate protocols across a broader security framework, publish findings publicly, and give qualifying projects ongoing operational security and active threat monitoring before suspicious activity turns into a larger incident.

Disclosure: This article was edited by Estefano Gomez. For more information on how we create and review content, see our Editorial Policy.