SOON has completed the security incident review, confirming that neither the protocol nor user assets were affected. The mainnet RPC has been restored.

According to ChainCatcher, Solana Optimistic Network (SOON) stated in a post that the security incident detected on July 12 has now undergone investigation and recovery. The incident did not involve any vulnerabilities in the SOON protocol, sequencer, or user-facing smart contracts, and no user funds were lost. SOON indicated that the event originated from a security issue in the off-chain operations environment.

Based on an investigation by third-party security firm BlockSec, external attackers gained unauthorized access by exploiting a misconfigured service, and due to insufficient access controls, were able to enter certain internal environments. The impact of this incident was limited solely to some operational infrastructure and related processes; on-chain user assets, user smart contracts, or SOON network security were not affected. Following the incident, SOON suspended the sequencer and some services, and initiated a comprehensive security audit. During this period, features such as NFT minting, token claiming, and on-chain withdrawals were temporarily disabled. SOON has now resumed NFT minting and token claiming functionalities, and restored mainnet RPC services and block production. The network has now returned to normal operation.