Solana withstood a massive DDoS attack: how the network overcame a historic threat

Solana successfully withstood a multi-week cyberattack with a scale of 6 terabits per second without any operational disruptions, as reported on December 9 by co-founder Anatoly Yakovenko. Unlike previous years, when similar DDoS attacks caused network collapses, this time the blockchain demonstrated significant improvements in resilience. The attack lasted several weeks, but users hardly noticed any difficulties in their operations thanks to engineering architecture enhancements.

Technical Metrics During the Attack

During the massive DDoS attack, key network indicators remained optimal. Median slot processing delay was zero, and transaction confirmation times, according to infrastructure provider Pipe Network, averaged approximately 450 milliseconds at the median and less than 700 milliseconds at p90. These figures show that an attack of 6 Tbit/s generating billions of packets per second did not degrade system performance.

Helius CEO Mert Mumtaz highlighted the exponential diversity of engineering solutions, noting that users did not experience weeks of massive DDoS attacks precisely because of the quality of engineering decisions implemented in the network.

How Solana Overcame Criticism and Weaknesses

The current success in countering the massive DDoS attack contrasts with Solana’s turbulent past in 2021-2022. During that period, the network regularly experienced outages due to similar cyberattacks, the most severe of which in September 2021 led to a 17-hour shutdown during a token sell-off. In May 2022, an attack caused the seventh network collapse of that year, prompting widespread criticism regarding Solana’s centralization and architectural fragility.

A turning point was the implementation of Firedancer — a new validator client developed by Jump Crypto. This solution significantly optimized network performance and its resilience to external threats. The last major disruption of Solana was recorded in May 2023, and since then, the network has demonstrated stability.

Global Context: How Other Platforms Handle Attacks

While 6 Tbit/s is a substantial figure, it does not fall into the category of the largest DDoS attacks in modern history. Cloudflare thwarted attacks exceeding 29.7 Tbit/s in Q3 2025, many of which originated from the Aisuru botnet. Microsoft Azure blocked an attack of 15.72 Tbit/s targeting Australian infrastructure in October of the same year.

At the same time, questions remain about the details of the attack on Solana. The methodology for measuring the 6 Tbit/s volume has not been disclosed, the attackers’ identities are unknown, and their motives are still under investigation. The Solana Foundation has not officially commented on the incident, although the network status page does not record any outages in December 2025.

Market Signals and Network Activity

Despite the massive DDoS attack, the SOL price remained virtually unchanged, demonstrating investor confidence in the network’s resilience. The current token price is $86.56 with a daily volatility of +1.33%. The market capitalization of Solana now stands at $49.44 billion, with a 24-hour trading volume of $61.35 million.

The network also shows leading activity metrics. Recently, Solana reached a historical high of approximately $380,000 in daily payment volume, reflecting a 750% increase over the past week. These indicators suggest that the successful defense against the massive DDoS attack has strengthened user trust in the platform.