An article published on November 13, 2026, explains why Solana’s durable nonce is slated for removal and describes an on-chain approach to offline signing in its place. It attributes the change to special-case runtime logic associated with replay vulnerabilities, a barrier to asynchronous execution, and misuse through spam transactions during congestion. The article describes a planned transition, not a completed removal.
The proposed alternative uses an offline-signing program and a CPI Passthrough pattern. A cold key signs offline; a hot wallet pays the fee and submits the transaction. The program then verifies the signature and advances its own nonce.
The article compares Anza Programmatic Signer and Blueshift Vector across signature coverage, hardware-wallet compatibility, key types, PDA management, concurrent messages and tooling. It also provides an offline SOL-transfer walkthrough for each approach. Its migration discussion flags application changes and program-compatibility considerations, including stack height, instruction introspection and Token-2022 CPI Guard, alongside remaining work.
Original article · Published November 13, 2026, at 02:26 (UTC+08:00).