Internet Scans Probing Solana/Surfpool Developer Endpoints

Tue, 11 Aug 2026 11:54:43 +0000

Engineer — Learn: If you expose Solana JSON-RPC or gRPC dev endpoints (e.g., surfpool) on public interfaces, audit firewall rules to ensure they are not internet-reachable; no active exploitation or PoC reported.
SOC/IR — Learn: Awareness item: opportunistic scans targeting Solana dev endpoints are occurring, but no IOCs, TTPs, or confirmed exploitation are provided to act on.
Leader — Skip

Scanning on CuraSec