The Solana Foundation has identified a potential vulnerability in the ZK ElGamal Proof program, which could allow attackers to bypass verification and perform unauthorized operations, such as unlimited coin minting. Despite the vulnerability, no exploitation has been detected, and the impact is considered minimal due to low usage rates. In response, the Solana team updated the Token-2022 program on June 11, disabling the confidential transfer function. An urgent upgrade request was issued on June 13, and by June 19, the ZK ElGamal proof program was officially disabled on the mainnet-beta. The affected function is primarily used by innovative products under testing, with mainstream stablecoins not yet open to users. The Solana Foundation plans to complete an audit and fix the issues before re-enabling the program, a process expected to take several months.