Solana successfully withstood one of the largest DDoS attacks without stopping: how the network achieved 100% resilience

Solana is experiencing its most serious active security threat: a massive distributed denial-of-service (DDoS) attack at 6 terabits per second over several weeks. However, the most remarkable aspect of this situation is that network users didn’t even notice the attack. Co-founder Anatoly Yakovenko discussed the incident on December 9, describing it as a “silk” in terms of attack power, but a complete victory in terms of network reliability.

The current SOL price hovers around $88.35, with a 24-hour volatility of -1.75%. Throughout the DDoS attack, the network demonstrated extraordinary stability, sharply contrasting with the outages experienced during the early development of the ecosystem.

How engineering solutions transformed DDoS resilience

Technical metrics during the attack were impressive. The median slot delay remained perfectly zero, with no fluctuations. Infrastructure provider Pipe Network confirmed that the median transaction confirmation time remained nearly unchanged—about 450 milliseconds—and the p90 metric stayed below 700 milliseconds. This means that even in the worst-case scenarios, users did not experience any delays.

Billions of packets per second were directed straight at the infrastructure. Under normal circumstances, such an attack would cause significant increases in delays, missed slots, or failed confirmations. However, data showed stability across all metrics.

Mert Mumtaz, CEO of Helius, rightly noted that the fact users didn’t even hear about the attack speaks to the level of engineering mastery achieved by the ecosystem. A key update was Firedancer—a new client-validator developed by Jump Crypto specifically to enhance network performance and resilience against external impacts.

From instability to reliability: Solana’s evolution

This success is much more significant in the context of Solana’s history. In 2021-2022, the network suffered from a series of DDoS attacks that caused prolonged outages. A notable incident in September 2021 during an NFT sale led to a complete network shutdown for 17 hours. The May 2022 attack was the seventh outage that year, raising serious questions about the network’s architectural reliability and level of centralization.

Since May 2023, the network has reported no outages. This three-year period of continuous operation is a major achievement, demonstrating the results of investments in infrastructure improvements and system design. The transformation from critical vulnerability to absolute resilience showcases the power of ongoing engineering refinement.

The attack in a global context: where does Solana stand?

While the 6 terabit-per-second attack seems colossal, it’s important to understand its scale in the context of the largest internet attacks. Cloudflare thwarted attacks exceeding 29.7 Tbit/s in Q3 2025, primarily from the Aisuru botnet. Microsoft Azure blocked an attack of 15.72 Tbit/s against Australian infrastructure in October.

In other words, Solana withstood a significant attack, but in terms of absolute numbers, it did not rank among the largest incidents of the year. However, the key point is not the scale but the outcome: the network continued normal operation without interruptions.

Despite the prolonged attack, the SOL price barely changed, demonstrating market confidence in the project’s technical reliability. The network shows high activity: a recent all-time high of approximately $380,000 in daily transaction volume was reached, representing about 750% growth in a week.

Some details remain unclear: the attack measurement methodology was not published, the attackers’ identities are unknown, and motives are unconfirmed. However, the result speaks for itself—Solana’s engineering investments proved their worth under extreme pressure.