Last week, reports surfaced of Solana DDoS attacks when the network recorded massive malicious traffic.
Solana also reported stable performance, continuous block production, and regular consensus during the event. The participants of the network said no observable disruption to applications or settlement of transactions.
Magnitude of the Solana DDoS attack
Incoming requests surged to approximately 6 terabits per second during the Solana DDoS attack. The book is one of the biggest internet attacks of the year 2025. In June, Cloudflare already announced an even bigger attack of 7.3 terabits per second.
The Solana incident is ranked by security data as the fourth-largest DDoS incident of the year. Several days later, there was still a surge in traffic with occasional spamming. In spite of the continued pressure, there were no missed slots or delays in confirmations as indicated by the on-chain metrics.
It was observed that it took less than one second to settle transactions. Influencers who were monitoring the network said that the user experience was the same. The intrusion was against infrastructure layers but not the blockchain ledger.
Network resilience and the validator capacity
Solana has over 830 active validators in the network. This large ability to validate contributed to agreement during the attack. Major validators are said to have deployed backup systems to handle traffic loads.
The activity of DDoS was directed at overloading the nodes, validators, and RPC providers. These attacks are not able to modify the transaction history or ledger integrity. Solana affirmed that there was no outage in the case.
The timing was also significant because the attack occurred during Breakpoint, a conference of Solana, which took place in Abu Dhabi. Another introduction of the network was the Firedancer node client, which was also introduced around the same time. These two events went on without a hitch.
Comparison with the SUI network incident
Another. but smaller. DDoS was experienced with the SUI blockchain within the same period. SUI complained about poor service and slow block production. It had a temporary impact on slow performance among users.
SUI has about 100 validators, and this limits its capacity to deal with traffic bursts. The team subsequently established that the problem had been fixed. Mitigation was soon followed by the restoration of network operations to normal.
The comparison served to show the effect of the validator scale on resilience. Bigger decentralized networks are capable of distributing attack pressure in a better way. Smaller networks are still more susceptible to infrastructure pressure.
The use of DDoS attacks is still rare when targeting decentralized blockchains. The centralized Web 2.0 platforms are mostly used to deliver a message. The case of the Solana DDoS attack demonstrated that even a large network can survive extreme traffic without failing disastrously.
The assailants and their motives are not confirmed. Although they have not been able to disrupt operations internally by external attacks, Solana still has internal trading risks. In the last month, sandwich attacks took away in excess of 1,000 SOL belonging to traders. Over 47,000 transactions were also impacted at the time.
