Key Takeaways
- Solana Foundation partnered with Asymmetric Research to introduce STRIDE, a comprehensive security evaluation framework for DeFi protocols on Solana
- Projects undergo assessment across eight critical security dimensions, with public disclosure of findings
- Solana Incident Response Network (SIRN) establishes real-time threat intelligence sharing and coordination
- DeFi platforms exceeding $10M in total value locked receive complimentary threat monitoring after successful evaluation, funded by the foundation
- First quarter of 2026 saw $168M stolen from 34 DeFi platforms, representing a significant decline from Q1 2025’s $1.58B
Solana Foundation announced a pair of security initiatives on Monday designed to bolster protection against hacks and exploits throughout its DeFi landscape. The programs emerged from a collaboration with Web3 security specialist Asymmetric Research.
The primary initiative carries the name STRIDE — an acronym representing Solana Trust, Resilience and Infrastructure for DeFi Enterprises. This systematic framework provides evaluation and continuous oversight of security measures for protocols operating on Solana.
STRIDE examines projects through eight distinct security dimensions: program security, governance alongside access control, oracle and dependency vulnerabilities, infrastructure protection, supply chain integrity, operational security practices, monitoring paired with incident response capabilities, and log management combined with forensic readiness.
Asymmetric Research conducts independent assessments of projects according to this framework. All evaluation outcomes become accessible to the public, providing transparency for users and stakeholders.
Platforms maintaining total value locked above $10 million that successfully complete the evaluation receive continuous security assistance and active threat surveillance, with costs covered by the Solana Foundation. Platforms exceeding $100 million in TVL gain additional access to formal verification technologies for smart contract analysis.
Collaborative Network for Active Threat Response
The foundation simultaneously introduced the Solana Incident Response Network, designated as SIRN. This membership-driven network brings together security organizations and researchers specializing in the Solana ecosystem.
Initial members comprise Asymmetric Research, OtterSec, and Neodyme. Network participants exchange threat intelligence and organize coordinated responses during active security incidents.
SIRN welcomes participation from all Solana-based platforms, though access prioritization follows TVL rankings.
The Solana Foundation emphasized that these initiatives complement rather than replace individual project security obligations. “These resources are offered to ensure security, not replace what individual teams must do themselves,” the foundation stated.
Ongoing DeFi Security Challenges
These program launches follow one week after the Drift Protocol experienced approximately $280 million in losses through a social engineering attack attributed to North Korean threat actors.
Earlier in January, Solana DeFi platform Step Finance suffered a $40 million drainage. KuCoin reports indicated AI agents amplified the incident’s impact by autonomously executing substantial transfers.
During the first quarter of 2026, DeFi platforms collectively experienced losses exceeding $168 million from malicious actors, based on DefiLlama tracking. This total encompasses 34 distinct platforms.
This figure represents a substantial decrease compared to Q1 2025, which recorded $1.58 billion stolen from DeFi projects.
Step Finance’s private key compromise represented the most significant individual exploit during Q1 2026.
The Solana Foundation noted that adversaries continue “rapidly innovating,” emphasizing the necessity for sustained vigilance throughout the ecosystem.

