Solana Foundation is rolling out a new security push across its DeFi ecosystem, centered on two new initiatives: STRIDE, a structured security program for Solana protocols, and SIRN, a dedicated incident response network. The announcement is not about one exploit or one protocol. It is a network-wide attempt to raise security standards as more value, users and institutional attention move onto Solana.
The timing matters because Solana is framing this as a response to scale and to faster-moving attackers. The foundation says the ecosystem already includes heavily audited and formally verified infrastructure, but that adversaries are also evolving quickly. Its answer is to fund more systematic reviews, live monitoring and crisis response for protocols that clear certain risk and TVL thresholds.
Solana is moving from security tooling to a full security framework
At the center of the announcement is STRIDE, short for Solana Trust, Resilience and Infrastructure for DeFi Enterprises. Solana said the program will be led by Asymmetric Research and will evaluate ecosystem protocols against a framework built around eight security pillars. The findings will be published publicly, giving users and investors more visibility into how protocols measure up.
That is the strongest news angle here. Solana is not just offering more optional tools. It is trying to create a more visible security benchmark for DeFi on the network, where protocols can be evaluated, monitored and, at least indirectly, compared. The goal is to make security posture more legible before an incident happens, not only after one. This broader read is an inference from the framework and public-reporting structure Solana described.
Protocols above $10M TVL get live monitoring, and bigger ones get formal verification
Solana says protocols with more than $10 million in TVL that pass STRIDE’s evaluation will receive ongoing operational security support and 24/7 active threat monitoring, funded through Solana Foundation grants. The coverage will be calibrated to each project’s risk profile, with protocols securing more value receiving stronger protection.
For protocols with more than $100 million in TVL, the foundation says it will also fund formal verification, which it describes as a mathematical, proof-based method for checking smart contract correctness across all possible states and execution paths. That threshold-based design is important because it shows Solana is explicitly prioritizing security spending around where ecosystem risk is most concentrated.
SIRN is Solana’s answer to the moment after something goes wrong
Alongside STRIDE, Solana launched SIRN, the Solana Incident Response Network. While STRIDE is designed to assess and monitor security posture, SIRN is meant to respond during live incidents. Solana says it is a membership-based network of security firms and researchers focused on protecting the ecosystem in real time.
The founding participants are Asymmetric Research, OtterSec, Neodyme, Squads, and ZeroShadow. According to Solana, these members will share threat intelligence, coordinate active incident response and help evolve the STRIDE framework over time. SIRN is open to all Solana protocols, though response priority will be based on TVL.
That matters because Solana is trying to turn incident response into shared infrastructure rather than leaving every protocol to improvise alone in a crisis. This does not shift ultimate responsibility away from protocols, but it does create a faster-response layer across the ecosystem. That second point is partly stated by Solana and partly an inference from how SIRN is structured.
This security push builds on an existing support stack, not from scratch
The foundation also used the announcement to remind builders that several security services are already available at no cost across the ecosystem. Solana said Hypernative has provided ecosystem-wide threat detection and monitoring since September 2024, Range Security has been a security partner since October 2024, Riverguard by Neodyme is available for attack simulation, Sec3 offers static analysis and free consultations, and AuditWare’s Radar provides reusable security templates for developers.
Solana also said the foundation is a member of the Crypto Defenders Alliance, a coalition focused on stopping fraud, theft and liquidation of stolen digital assets through industry coordination and open-source tools. The message is that STRIDE and SIRN are additions to a longer-running security program, not a sudden change of direction.
Solana is helping more, but it is also warning protocols more clearly
One of the most important lines in the announcement comes near the end. Solana says these resources are meant to improve ecosystem security, but they do not remove responsibility from protocols themselves. For projects handling meaningful user funds, the foundation says rigorous security measures are mandatory, and the new programs are there to strengthen security, not replace protocol-level accountability.
That changes the tone of the announcement. This is not just a support package for builders. It is also a public signal that security expectations are rising. Protocols can no longer treat ecosystem tooling as a substitute for their own internal controls, audits and operational discipline. This is an analytical conclusion based on Solana’s explicit warning to teams managing significant user funds.
What still isn’t guaranteed
The announcement is detailed on structure, but it does not say how many protocols will enter STRIDE first, how quickly public evaluations will begin, or what precise standards sit inside all eight security pillars. It also does not guarantee that monitored or verified protocols will avoid future exploits. What Solana is offering is a stronger framework and faster response capacity, not a claim of zero risk.
Why it matters for crypto
- It shows Solana is trying to make DeFi security more systematic, visible and tiered by risk rather than leaving protection to ad hoc protocol decisions.
- The combination of STRIDE, 24/7 monitoring, SIRN and formal verification suggests mature ecosystems are increasingly competing on security infrastructure, not just speed or fees. This is an inference from Solana’s design choices.
- Public security evaluations could make protocol trustworthiness easier for users, allocators and institutions to judge before capital is deployed. This is also an inference based on Solana’s plan to publish findings.
- The announcement reinforces that as more value accumulates onchain, foundations may be expected to fund ecosystem-wide defense layers even while keeping protocol teams primarily responsible.
What to watch next
- Which Solana protocols enter STRIDE first and how public the evaluation results become.
- Whether protocols above the $10 million and $100 million TVL thresholds actually adopt the monitoring and formal verification paths Solana is funding.
- How quickly SIRN proves itself in live incidents, since incident-response networks matter most when they are tested under pressure. This is an inference based on SIRN’s purpose.
- Whether other major ecosystems respond with similar public security frameworks instead of relying mainly on one-off audits and bug bounties. This is an inference from the competitive significance of Solana’s move.