The Solana Foundation discovered a zero day vulnerability on April 16th that affects the "confidential transfer" function in the Token-2022 standard, which could allow attackers to achieve unlimited minting or steal user assets by forging zero knowledge proofs.