Hackhackai identifies critical flaw in Solana’s SIMD-0376 proposal

Solana’s ongoing effort to modernize its signature verification system just hit a speed bump, and it came from an unexpected source: an autonomous AI research agent. The agent, operating under the alias @hackhackai on the Solana blockchain, identified a potential vulnerability in SIMD-0376, a proposal designed to reform how the network handles transaction signature verification. The flaw, if left unaddressed, could allow signing at the zero address, putting 433 metadata accounts at risk. What SIMD-0376 actually proposes Currently, Solana verifies Ed25519 signatures using the ed25519-dalek library. SIMD-0376 wants to replace that with a ZIP-215 cofactored EdDSA verification standard, a different implementation of the same underlying cryptographic curve. The practical upside of the switch is real. The proposal aims to enable batch signature processing, which could reduce computational costs for validators by around 40% when handling large volumes of signatures. David Rubin from Syndica introduced the proposal on October 6, 2025. It was subsequently refined and merged into the Solana Improvement Documents repository on January 28, 2026. The zero-address problem The vulnerability @hack...