SOON has completed the security incident review, confirming that there was no impact on the protocol and user assets, and the mainnet RPC has been restored

Solana Optimistic Network (SOON) announced that the security incident discovered on July 12 has been investigated and resolved. The incident did not involve vulnerabilities in the SOON protocol, sequencer, or user-facing smart contracts, and no user funds were lost. SOON stated that this incident originated from security issues in the off-chain operational environment.

According to an investigation by the third-party security company BlockSec, external attackers gained unauthorized access through misconfigured services and further entered part of the internal environment due to insufficient access controls. The impact of the incident was limited to certain operational infrastructure and related processes, and did not involve on-chain user assets, user smart contracts, or SOON network security. After the incident, SOON suspended the sequencer and some services, and initiated a comprehensive security review. During this period, functions such as NFT minting, token claiming, and on-chain withdrawals were temporarily shut down. Currently, SOON has restored NFT minting and token claiming functions, and has resumed mainnet RPC services and block production. The network is now operating normally.