Solana's validator architecture requires supermajority consensus. When one autonomous system (AS) controls more than 25% of stake, it exceeds the Solana Foundation's delegation limits and creates single-point-of-failure risk for the entire network.
The bug pushed a single AS to 27.34% of staked SOL—86% of the way toward triggering total finality loss. At that threshold, one failing AS could halt network consensus permanently, breaking Solana's core security model.
The issue originated in Solana's BGP routing protocol implementation. Validators were incorrectly clustered under a single autonomous system number, concentrating stake far beyond safe limits and violating the network's own safety rules.
The incident shows Solana's decentralization still faces infrastructure-level risks. Unlike Bitcoin's geographic diversity of mining, many Solana validators share cloud infrastructure and routing paths, creating hidden consensus failures.
The Solana team identified and resolved the routing misconfiguration. However, the near-miss underscores the ongoing need to diversify validator infrastructure and reduce reliance on handful of cloud providers and ISP relationships.
Read More →