Solana has successfully defended against one of the largest distributed denial-of-service (DDoS) attacks ever recorded, with the sustained assault peaking at nearly 6 terabits per second over more than a week—yet producing zero measurable impact on network performance.
Scale of the Attack
The attack, disclosed December 16, 2025, ranks as the fourth-largest DDoS assault on any distributed system in internet history, trailing only Google Cloud’s record incident and two attacks mitigated by Cloudflare. Security researchers confirmed the attack vector targeted Solana’s infrastructure continuously for over seven days.
Helius.dev founder Mert (@0xMert_) revealed the scope on X: “Solana has been under a colossal DDoS attack for at least over a week now btw. The fact that you haven’t experienced it is a big testament to the level of engineering present here.”
The timing coincided with Solana’s Breakpoint conference in Abu Dhabi and the live deployment of the Firedancer node client, suggesting attackers may have sought to disrupt these high-profile events.
Network Performance Remained Stable
Despite the unprecedented attack volume, Solana’s network metrics showed no degradation. Transaction confirmation times held at approximately 450 milliseconds at the median, with 90th percentile confirmations staying below 700 milliseconds—entirely normal operation.
Slot latency remained at 0-1 slots throughout the attack, indicating the network’s consensus mechanism continued functioning smoothly. Validators reported no unusual resource strain or synchronization issues.
Comparative Context
The attack’s failure to impact SOL—SolanaSOLPrice:Loading…24h Change:—Market Cap:— stands in stark contrast to the network’s troubled history. In 2022, Solana suffered multiple outages due to network congestion, earning criticism for reliability issues. The successful defense demonstrates significant infrastructure improvements over the past three years.
Notably, the Sui network was attacked simultaneously but experienced degraded block production—likely due to operating with approximately 100 validators compared to Solana’s 830+. The comparison highlights how validator set size and network decentralization contribute to DDoS resilience.
Technical Architecture Validated
Solana’s ability to absorb such massive attack traffic without degradation validates several architectural decisions, including its proof-of-history consensus mechanism, the Gulf Stream mempool-less transaction forwarding protocol, and recent upgrades to validator client software.
The Firedancer client, developed by Jump Crypto and deployed during the attack period, runs on different infrastructure than the original Solana Labs client, potentially providing additional resilience through client diversity.
Industry Implications
The successful defense bolsters Solana’s credibility as enterprise-grade infrastructure capable of handling hostile conditions. With DeFi protocols, NFT marketplaces, and increasingly institutional applications built on Solana, network reliability is essential for continued ecosystem growth.
SOL’s price remained under pressure during the period, trading around $130, though the weakness reflected broader market conditions rather than attack-related concerns. The network’s resilience may provide a fundamental counterweight to bearish sentiment as markets stabilize.
Reported by BlokchainFeed's research team — crypto journalists and market analysts with 50+ years combined experience covering blockchain and digital assets.
Meet Blok →