Solana Weekly Recap (October 18, 2026): Alpenglow on October 21, Ledger, ETF Outflows

The week had five themes. Alpenglow is scheduled for epoch 1064 on October 21, Anza recommends Agave v4.3.2, and Firedancer published a mainnet-ready release plus its own bug-bounty platform. Ledger is pulling hardware wallets off open shelves, MediaMarktSaturn removed the devices from its range, and Candy locked its site after SOL outflows. France has two budget amendments on stablecoins, and the EBA classified USDC as a significant e-money token. The Pando Solana ETF starts trading on HKEX, Schwab named SOL for year-end, and U.S. spot ETFs on SOL posted a tenth straight outflow day. Jupiter opens YOLO, more stock tokens start trading, and Blockworks publishes the quarter’s figures. We summarize and link to our full coverage for each.

Infrastructure

Alpenglow: Alpenglow is scheduled for October 21, at the start of epoch 1064. Anza cites about 14:50 UTC. The Solana Foundation cites about 15:00 UTC. Ordinary signing does not change. The test-cluster migration on version 4.3.2 is complete, according to Brennan Watt. → Read the story
Agave v4.3.2: Anza names Agave v4.3.2 the recommended release for every validator on mainnet-beta. It carries performance and stability fixes ahead of Alpenglow. → Read the story
Firedancer v26.10.2: Firedancer v26.10.2 is mainnet-ready and supports Alpenglow in operation. This release does not support the switch from TowerBFT. For the migration, the Foundation names clients based on Agave. → Read the story
Bug bounty: Firedancer opened its own platform at bounty.firedancer.io. Until November 20, rewards are doubled, and findings on Alpenglow are tripled. → Read the story
Jito BAM: Jito lets searchers send bundles straight to BAM nodes. The detour through the block engine is gone. Direct Bundle Ingest is paused for maintenance ahead of Alpenglow. → Read the story
Durable nonces: The Solana Foundation wants durable nonces removed from the protocol. The replacement is onchain programs for offline signatures. The guide gives no calendar date. Anyone who only signs ordinary wallet transactions does not have to change anything. → Read the story
web3.js: From October 19, npm installs @solana/web3.js with no version pin as v3. On October 17 the latest tag was still 1.99.0. Per the docs, version 1.x receives only critical fixes from here. → Read the story
Helius: Helius has opened preconfirmations to every paid plan. New filters cover source, signer, signatures, and instructions. The free plan stays outside, per the docs. → Read the story
Superteam and Helius: Individual developers and builders in the Superteam network get the Helius Developer plan free for one year, according to Superteam. Startups and growing teams get the Business plan free for three months. → Read the story
Agave 4.4 beta: Anza published Agave v4.4.0-beta.1 as a pre-release. Validators can set commission in basis points, separately for block revenue. It is not a mainnet release. → Read the story
Inflation commission: Marinade’s Explore page shows jumps in the inflation commission from 0 to 100 percent within an epoch. The reward split uses the rate from the start of the prior epoch, not the rate on screen. → Read the story
SIMD-0675: A study on solana.com evaluates a geographically reordered leader schedule. The random, stake-weighted plan stays. Consecutive leaders would sit closer together. Each validator keeps the same number of windows. Across 6,250 simulated networks, the study recommends a STAKE_FLOOR of about 10 percent and a RUN_LENGTH between 3 and 7. At 7, it reports about 29 milliseconds of average gain per leader handoff, not in confirmation time. There is no adoption and no date. Europe accounts for 64 of the 124 locations in today’s set. → Study
Squads: Post-quantum signatures with Falcon-512 for voting members of a Squads multisig have been tested on mainnet. Squads co-founder Sean Ganser wrote that on X. Support is planned for the next release of the SquadsX extension. The thread gives no date. Blueshift’s Vector program checks the signature. The Squads core program and Solana’s Ed25519 signatures stay as they are. Per SolanaFloor, the fee payer still signs with Ed25519. → Thread · SolanaFloor

Security

Ledger: MediaMarktSaturn has removed all Ledger products from stores and online platforms. Donjon describes an LTE implant in devices sold through CryptoBilis. On October 15, Ledger wrote that the chip, the operating system, and Ledger’s servers were not compromised. Test purchases in Germany, among other places, were clean, per Ledger. Authorized sellers are to keep devices out of open shelves and hand them over only at purchase. Ledger does not confirm losses at other sellers. → MediaMarktSaturn · Seller rules
SlowMist: SlowMist reports a phishing campaign built around a fake Ledger firmware update. The page shows a device picker and an “Update Now” button. → Read the story
Ledger Atom: Ledger introduced the Atom signer at Op3n. The Founders Edition costs $849, according to Pascal Gauthier. The Seeker app comes preinstalled. → Read the story
Candy outflows: On October 12, Candy wrote on X that more SOL had been taken from Candy wallets. The site stays locked. DC3 counts about 1,500 wallets. A query of the public mainnet RPC shows 1,547 transactions into one address and a balance of 425.99 SOL. → Read the story
Candy refund: Candy wrote that minted NFTs are locked and that a refund of the SOL taken out is being prepared. 420 SOL moved to a new address. Who controls that address is not established. → Read the story
Address poisoning: Bitquery counts 4,497,798 Solana wallets that received lookalike dust from October 30, 2025, through October 7, 2026. Later, 1,104 of them paid the lookalike, $940,106 in total. Bitquery calls that a lower bound. → Read the story
Sandwich attacks: Over the same window, Bitquery counts 6,850,144 sandwich attacks. Gross proceeds were 309,010 SOL, which Bitquery puts at $29.7 million before costs. Per Bitquery, 96 percent involve Pump.fun. → Read the story
Failed swaps: Bitquery counts at least 2.4 billion failed swap transactions, 22 percent of attempts. Fees were at least 112,948 SOL. → Read the story
Meteora DAMM v1: Meteora is switching LP-share accounting in DAMM v1 to the LP mint supply. Seven pools stay closed to deposits and swaps. One wallet reached about $12,644. → Read the story
Solflare: In Solflare, SOL freed by the rent cut can be claimed with a tip. Two phases switched on, and a figure of about 30 percent, are Solflare’s own numbers. Pages named “Reclaim SOL” are not part of that. → Read the story

Regulation, ETFs, and Treasuries

France: The National Assembly is considering two amendments to the 2027 budget. They are not enacted law. One would end the tax deferral when a swap finishes in an e-money token, from January 1, 2027. Another would require self-custodied holdings of at least €100,000 to be reported as of December 31. → Read the story
USDC: On October 14, the EBA classified USDC as the first significant e-money token in the EU. From November 12 it supervises own funds, the reserve, liquidity, and redemption plans. The ACPR keeps governance. → Read the story
Pando: HKEX admits the Pando Solana ETF (2831, PANDO SOL) to trading on October 13. The fund holds SOL directly, with no staking. The management fee is 0.60% a year. Ongoing charges are estimated at 1.60%. → Read the story
Schwab: Schwab plans to add more coins at Schwab Crypto by year-end. Rick Wurster said so on October 15 and did not name them on the call. The August 27 release names SOL, AVAX, and LINK. Neither text gives a calendar day for the start. → Read the story
Spot ETFs: On October 16, U.S. spot ETFs on SOL lost $12.668 million, per SoSoValue, all of it from BSOL. On the Farside table that is the tenth straight outflow day since October 5. Farside shows the day at $12.7 million. → Read the story
SkyAI: SkyAI wants to buy up to 95 percent of each class of shares and warrants at $3.00 a piece. About 1 million SOL has been sold. The board rejected the proposal from Forward Industries. Bastion Trading will not tender. Per Bastion, other shareholders should wait as well until the SOL sales are disclosed. Bastion said so on October 14. With related parties, Bastion says it holds about 9.99 percent of the common stock, and it is asking for at least $3.50 a share. Those are Bastion’s demands. → Read the story · Bastion release
DeFi Development Corp.: The company reports about 22,070 more SOL and SOL equivalents for the past week. Holdings stand at about 2,586,282. → Read the story

Markets and Tokenized Assets

App revenue: Per Blockworks, app revenue on Solana in the third quarter was $299.1 million, 48 percent above the prior quarter. Tokenized stocks reached $7.1 billion. Spot ETPs on SOL took in $492.3 million net. → Read the story
FCAT: FCAT’s report puts tokenized real-world assets on Solana from about $1 billion to $4.4 billion within a year. There has been no major mainnet outage for more than two years. Vote success was about 99.7 percent. → Read the story
Castle Labs: Tokenized real-world assets on Solana rose from $700 million to $4.3 billion in one year, according to Castle Labs. Tokenized stocks on Solana rose from $63 million to $455 million. → Read the story
Stablecoin transfers: According to Blockworks, 557,083,806 stablecoin transfers ran on Solana in September, ahead of BNB Chain at 542,805,788. The chart counts transfers, not a dollar amount. → Read the story
Ondo: Capital Markets writes that Ondo has passed $500 million in tokenized RWAs on Solana. rwa.xyz lists Ondo there at 454 RWAs and $514.6 million. → Read the story
BUIDL: The RWA Foundation writes of $871.5 million across 13 wallets for BUIDL on Solana. The story did not recount that figure on rwa.xyz. → Read the story
Pyth ARR: Pyth writes of $11.49 million in ARR for the third quarter, 86 percent above the prior quarter. That is Pyth’s figure, not an audited statement. → Read the story
Pyth RWA perps: Pyth reports $2.03 trillion in third-quarter RWA perp volume priced through its feeds. About 96 percent falls into three classes, per Pyth. That figure is Pyth’s as well. → Read the story
RIOT: Raydium writes that RIOT is tradable on Solana via Sunrise and Backpack Securities. The United States and Canada are marked as blocked. → Read the story
CMG: Backpack Securities issues the CMG token and writes that it is redeemable 1:1 for Chipotle shares. Sunrise lists the mint. Raydium writes that CMG is tradable there. → Read the story
UVXY: Raydium and Jupiter report the ProShares UVXY ETF as tradable on Solana, via Sunrise and Backpack Securities. Jupiter describes it as 1.5 times the daily move. → Read the story
USDGO Plus SP: 2WA is bringing the USDGO Plus SP fund onto Solana. OSL tokenizes the shares and distributes them to professional investors in Hong Kong. → Read the story
USDGO on Jupiter Lend: Jupiter writes that trading liquidity for USDGO is open on the Jupiter Lend AMM. Fluid provides it. Per Jupiter, the issuer is Anchorage Digital Bank and the platform is OSL. → Read the story
USDG: Ramp supports USDG on Solana. Converting U.S. dollars to USDG and back carries no fee, per the digital-asset team and Global Dollar. → Read the story
USDPT: Bitso has added USDPT to its app. USDPT is Western Union’s dollar stablecoin on Solana. Per DiarioBitcoin, eligible customers in Mexico can buy and sell it with pesos. → Read the story
USDAU: AllUnity in Frankfurt describes USDAU as a fully backed dollar stablecoin and describes itself as a BaFin-licensed e-money institution. The launch was September 30. The report follows on October 15. → Read the story

Products and Ecosystem

YOLO: Jupiter has put YOLO up as a beta on jup.ag. Long and short run on SOL, BTC, and ETH, at up to 1,000× leverage. Trading is against the house. Jupiter calls YOLO unaudited. → Read the story
YOLO volume: Jupiter writes that YOLO reached $1 billion in volume in less than 24 hours. That is Jupiter’s figure. → Read the story
Jupiter ASR: 50 million JUP for July through September is claimable. Distribution follows time-weighted stake. The deadline, per Jupiter, is January 12, 2027. → Read the story
Token pages: Jupiter has reworked its token pages. New pieces are a watchlist for tokens and wallets, a Pulse overview, and holder labels. → Read the story
Marinade ASR: MNDE rewards for the third quarter are claimable at Marinade until April 1, 2027. 4,093,426 unclaimed MNDE went to the treasury. → Read the story
Marinade PSR: Protected Staking Rewards have paid 71 SOL since September 1, across 34 incidents on 19 validators. The make-whole payment comes from the validator’s bond. Marinade wrote that. → Read the story
Sanctum: Sanctum writes that an update will turn the wallet into a multisig with three keys. Two of them are meant to clear a transaction. There is no start date. → Read the story
Kamino, New York: Kamino has appointed Matthew Klopfer and Blake Messer and is opening a U.S. headquarters in New York. → Read the story
Kamino on near.com: Kamino writes that yield on SOL accrues through a Gauntlet-curated vault on near.com. The wallet address stays hidden from the vault. → Read the story
Phantom perps: Phantom has passed $50 billion in perps volume. The post cites 192,000 traders over a little more than a year. That is Phantom’s figure. → Read the story
Phantom home: Phantom is putting the Send and Deposit buttons back at the front of the Home tab. Onboarding can create a seed phrase again. Apple Pay arrives in seconds, according to Brandon Millman. → Read the story
Meteora referral: From cycle 4, Meteora staking rewards are claimable only when LP positions from the same cycle earn at least $10 in fees. → Read the story
Kurate: Kurate writes that users can lend and borrow EURC and EURØP on Solana. Its own markets run through Kamino. The site shows a proof-of-concept phase and €485.20 in TVL. → Read the story
Multiliquid: Uniform Labs reports a seed round for Multiliquid led by Polychain, with Circle Ventures. Pre-seed and seed together come to $8 million. → Read the story
ASTER: Aster confirms that ASTER is available on Solana via Sunrise. Sunrise names the mint on sunrise.xyz. How the token is backed is not stated there. → Read the story
NEAR: NEAR is tradable on Solana via Sunrise. Sunrise is working with NEAR Intents on that. A direct integration is planned next. → Read the story
ZEC: Sunrise writes that ZEC is tradable on Solana via NEAR Intents. The contract address is in Sunrise’s thread. → Read the story
pay.sh: The Solana Foundation reports that pay.sh works with Ledger Agent Intent. The agent requests the payment, and the signature is made on the Ledger. The same week, the Foundation put the BRIJ Flight API on pay.sh. Flight search runs with no signup. Booking runs through a USDC escrow and costs $0.10 per call. → Ledger Agent Intent · BRIJ
Accelerate Shanghai: Accelerate Shanghai is postponed. According to Lily Liu, signups quadrupled overnight and ran well past the registered cap. → Read the story
Shanghai office: The Solana Foundation is showing a new office in Shanghai. Trading in cryptocurrencies remains banned in mainland China. → Read the story
Superteam Germany: At Superteam Germany’s demo dinner on October 15, eight teams presented to Cherry VC, Speedinvest, and Burda. The story names no funding commitment. → Read the story
NEAR Council: The NEAR Foundation has appointed Helius CEO Mert Mumtaz to the Foundation Council. He continues to lead Helius and is a juror for the NEAR hackathon from November 1 to 14. → Read the story
Mudwater: Yuga Labs started Mudwater on October 18, a trading-card set built around Bored Ape Yacht Club. Each digital item is a Solana NFT, backed by a printed card in a vault. A Bored Ape can claim 10 packs, a Mutant Ape 2, until January 19, 2027, at 00:00 UTC. → Read the story
Altitude: Altitude has published an MCP server for its Solana business account. After sign-in, assistants can read workspaces, balances, and transactions. Per the docs, they cannot create payments, approve them, or move funds. → Post · Documentation

Deeper Reading

Alpenglow: Solana’s New Consensus: what Votor changes about finality
Solana Wallet Security: phishing, drainers, and hardware wallets
Tokenized stocks on Solana explained: how stocks are represented onchain

Tokenized securities are not accessible in all jurisdictions.