Zelcore

Holding SOL in Zelcore: Outage Lessons and Practical Self-Custody

7 min read
Holding SOL in Zelcore: Outage Lessons and Practical Self-Custody

Four parts into this deep dive, you have the theory: where the architecture came from, how Proof of History and Tower BFT nail finality in about thirteen seconds, how priority fees and Jito tips price congestion, and the story behind validator-set decentralization and Firedancer. Now the practical question: what does holding SOL in Zelcore actually look like, and what should the outage history teach you about it?

The short answer is that Solana is genuinely fast when it works and genuinely hardened by each failure it has shipped through — but it does pause, it does freeze exchange deposits when it pauses, and your self-custody plan needs to account for both halves of that sentence.

A pattern, not a list

Solana's downtime since 2020 is not a single embarrassing incident. It is a pattern, and the pattern is informative: every multi-hour halt has produced a named, shipped fix. The engineering team treats each post-mortem as a spec for the next release. That makes the outages easier to understand once you stop reading them as isolated scandals and start reading them as a sequence.

The outages, in order

September 14, 2021 — the Grape Protocol IDO. Bots slammed the network with over 300,000 transactions per second of spam trying to win mint allocations. Validators forked on memory exhaustion, consensus stalled, and the cluster was down for roughly seventeen hours. The response: ignore write locks on programs so high-contention transactions wouldn't poison everything else, rate-limit TPU forwarding, prioritize vote transactions.

January 2022 — a degradation rather than a halt. Excessive duplicate transactions were still cheap to spam. Solana v1.8.12 and v1.8.14 added SigVerify deduplication.

April 30 to May 1, 2022 — Candy Machine NFT bots. Roughly six million requests per second, over 100 Gbps of ingress, about eight hours of impaired service. This outage produced the most durable fixes: a Candy Machine bot tax, QUIC transport shipped in v1.13.4 replacing the raw UDP ingress, stake-weighted QoS (higher-stake validators get more TPU stream slots), and the priority-fee mechanism itself.

June 2022 — a runtime bug let durable-nonce transactions process twice. About 4.5 hours of halt. Fix: v1.10.23 separated the nonce domain from the blockhash domain.

February 2023 — a validator produced an exceptionally large block at around 150,000 shreds, overwhelming Turbine's deduplication filters. Nearly nineteen hours of downtime. Enhanced dedup shipped in v1.13.7 and v1.14.17.

February 6, 2024 — the Agave JIT cache hit an infinite recompile loop on a legacy loader program. About five hours. Fix: disable the legacy loader in a backported v1.17.

August 2024 — a near-miss, not an outage. An ELF-alignment bug was coordinated-patched to supermajority by August 8 with no downtime. That is the pattern maturing.

Read that sequence end-to-end and you see the shape: attack vectors identified through pain, specific code shipped, the same class of attack not repeating. It is not a clean record. It is a learning curve, and the slope has been steep.

What the pattern teaches a holder

The tactical lessons are concrete.

Don't send right before a hot mint. If there is an IDO, a major NFT drop, or any other scheduled congestion event, delay your exchange deposits or withdrawals by an hour. Most recent halts have been triggered during these exact moments.

Treat unfinalized transactions as reversed during a restart. Thirteen-second finality is great on the happy path. During a restart, the cluster may roll back to the last optimistic confirmation and unwound transactions vanish. Wait for finalization before acting on inbound funds during recovery.

Priority fees are the real knob now. The 5,000-lamport base fee is nearly flat. A stale RPC may quote it alone while real inclusion during congestion requires 100,000+ micro-lamports per compute unit on top. Your wallet's fee estimator matters.

Self-custody doesn't vanish during an outage. Your SOL isn't "in" Zelcore — it lives on Solana. A halt delays your ability to move it, but the private key still controls it. An exchange freezing withdrawals is a different category of problem entirely.

Your SOL in Zelcore: one address, rent, and SPL tokens

The custody model is simpler than the outage story.

A Solana address is an Ed25519 public key, base58-encoded, about forty-four characters. Zelcore derives yours from your seed the first time you enable SOL. One address receives everything — native SOL, USDC, JitoSOL, every SPL token, every NFT — all at the same base58 string.

But there is a quirk that surprises people: your address doesn't really "exist" on-chain until something funds it past the rent-exempt minimum, about 0.00089 SOL for a bare system account. Send dust below that and some RPCs will reject it. The practical floor for a live Solana account is well under a cent, but it isn't zero.

SPL tokens add a layer. They don't live at your main address. Each SPL token you hold sits in its own Associated Token Account (ATA) — a Program Derived Address deterministically computed from three seeds: your wallet address, the SPL Token Program ID, and the mint address of the specific token. Zelcore resolves these for you, so the UI shows a unified balance, but on-chain each token is a separate 165-byte account.

Each ATA locks rent. That 165-byte account rent-exempts at 2,039,280 lamports, or roughly 0.002 SOL per token. Hold ten SPL tokens and you have roughly 0.02 SOL locked as rent-exempt deposits. This is not spent. It is refunded if you close the ATA — but only if the account is empty, and closing the ATA of a token you still hold means losing that token. The practical rule: leave active ATAs alone, but close the ATAs of tokens you no longer want, and reclaim the SOL.

One more quirk: if someone sends you a token you have never held before and your ATA doesn't exist, the sender pays to create it. Some airdrops and scam drops exploit this to populate your wallet with tokens you didn't ask for. Review what you actually hold before approving any "cleanup" transactions.

Staking, signing, and closing the loop

Native staking (direct delegation to a specific validator) is not currently in Zelcore's Solana UI. To stake in 2026, connect Zelcore via WalletConnect to a staking dApp — Marinade, Jito, Sanctum, or a validator's own interface — and sign the delegation transaction from Zelcore. The same flow covers swaps on Jupiter, NFT mints on Tensor, and any other dApp interaction.

When you sign, Zelcore shows the compute-unit price. During congestion, sanity-check it. A dApp spiking priority fees to 500,000+ micro-lamports per CU is not necessarily malicious, but it is information you should see before confirming.

Backup is the same story as every chain in this catalogue: the seed phrase is your only recovery. Lose it and no amount of on-chain wealth will help you.

Key takeaways


That closes the Solana Deep Dive. Five parts: the monolithic architecture, the PoH-plus-Tower-BFT consensus, the fee market, the validator set, and the practice of holding. The same arc we walked for how we close Bitcoin and Ethereum — different ledgers, different consensus, different fee models, but the same underlying lesson: self-custody is not a single act. It is understanding the trade-offs specific to each chain and building habits that survive the chain's bad days. Solana's bad days are better documented than most. That is a feature, not a bug.


Further Reading

Holding Ethereum in Zelcore: Gas Hygiene, L2 Access, and What Pectra and Fusaka Change

Holding Ethereum in Zelcore: Gas Hygiene, L2 Access, and What Pectra and Fusaka Change

Capstone of the Ethereum Deep Dive: one 0x address for everything, reading EIP-1559 fees, auditing approvals, L2 choice, and Pectra plus Fusaka in practice.

8 min read
Your Attack Surface: Phishing, Clipboard Hijackers, Fake Apps, and SIM Swaps

Your Attack Surface: Phishing, Clipboard Hijackers, Fake Apps, and SIM Swaps

A practical catalogue of the top attacks on self-custody users — address poisoning, clipboard malware, fake wallet apps, and SIM swaps — with concrete mitigations for each.

9 min read
Backing Up and Recovering Your Wallet

Backing Up and Recovering Your Wallet

Your seed phrase is the only thing between you and total loss. Learn how to store it, test it with a recovery drill, and plan for the worst.

9 min read

Join Our Newsletter

Get a friendly update from us once a month. No spam, just the latest from Zelcore.

Join Our Newsletter
    Holding SOL in Zelcore: Outages and Self-Custody