🔥Jito can crash 20% of @solana validator🔥 there’s a funny bug in FD's Jito plugin if jito sends a bundle of 6 Tx - validator dies 💀 1/6

notes: @paladin_solana responsibly disclosed the bug to FD & SF, and posting this with FD’s explicit approval all credit goes to @anoushk77 who identified the bug while adding multiple blockengines support to FD most validators now upgraded to 0.8, only 6% run 0.7 2/

is a single entity ability to blow up 20% a big deal? yes but there's a bigger deal: putting "trusted entities" in the middle of Solana's architecture is. a. terrible. ides. 3/

validators "trust" jito to send valuable bundles they didn't mean to trust jito not to nuke them how did such a bug slip by? bc things get murky once you start adding "trusted entities" engineering-wise you move from -"assume everyone hostile" to -"they won't do it to us" 4/

"they won't waste our entire slot with reverting bundles, right?" "they won't send us invalid Tx, right?" so.. they won't send us a 6-Tx bundle🤷‍♂️ 5/