SOON has completed a security incident review and confirmed that it did not impact the protocol or user assets. The mainnet RPC is now restored.

July 28th, Solana Optimistic Network (SOON) announced that the security incident discovered on July 12th has been investigated and remediated. The incident did not involve the SOON protocol, sequencer, or user-facing smart contract vulnerabilities, and no user funds were lost.

SOON stated that the incident originated from a security issue in the off-chain operational environment. According to the investigation by the third-party security firm BlockSec, an external attacker gained unauthorized access through a misconfigured service and further penetrated some internal environments due to insufficient access controls. The impact of this event was limited to some operational infrastructure and related processes, with no impact on on-chain user assets, user smart contracts, or SOON network security.

Following the incident, SOON temporarily paused the sequencer and some services and initiated a comprehensive security review. During this period, functions such as NFT minting, token claiming, and on-chain withdrawals were temporarily disabled.

Currently, as of July 21st, SOON has restored NFT minting and token claiming functions, and as of July 27th, has restored the mainnet RPC service and block production. The network is now back to normal operation.