Security Updates

Yahan important security aur wallet updates listed hain, taki aap samajh saken kya badla aur kyon important hai.

2026-03-12

Wallet Safety Hardening Rollout

Signing flow, transaction policies aur signed-request validation par strong safeguards add kiye gaye.

Impact: Phishing prompts aur replay attempts ke khilaf protection improve hota hai.

User action: Agar aap official domain use kar rahe hain to koi action zaruri nahi hai.

UI aur transaction path me emergency wallet action kill switch add kiya gaya.
Allowed programs aur instruction limits ke sath transaction policy checks add hue.
Signed message context validation (domain, URI, chain, nonce, time window) strict kiya gaya.
Nonce consumption aur trusted-origin checks ke sath replay protection add hua.

2026-03-13

Wallet Signing Policy Expansion

Signing se pehle instruction shape limits aur semantic SPL token checks ke sath filtering expand ki gayi.

Impact: Hidden high-risk instructions ke prompt me bundle hone ka chance kam hota hai.

User action: Wallet prompts ko review karte rahein; system ab aur risky payloads auto-block karta hai.

Per-instruction max accounts aur max data-size thresholds add kiye gaye.
Flow-wise semantic SPL token opcode restrictions add ki gayi.
Token creation, standard pool aur CLMM flows par stricter checks apply hue.
Focused security tests aur lint ke sath revalidation complete ki gayi.

Update Entry Template

Future security release notes ke liye is format ka use karein.

Date: YYYY-MM-DD
Title: <short release title>
Summary: <1-2 line explanation>
Impact: <kya risk ya behavior badla>
User action: <agar zarurat ho to user kya kare>
Details:
- <key change 1>
- <key change 2>

Back to Resources Security Page Guide