Solana’s proposed nonce replacement would put a signer program between cold-key approval and execution. A failed attempt may leave approval usable later. Migration still depends on an audited mainnet replacement. Analysis by @akibablade