Solana's Alpenglow Upgrade Replaces TowerBFT With Votor

Solana is tearing out TowerBFT and Proof of History, the consensus mechanisms it has run since its 2020 launch, and replacing them with a new voting engine called Votor — while the live network keeps settling billions in value. The change cuts finality from 12.8 seconds to roughly 100-150 milliseconds by moving validator votes off-chain into lightweight BLS12-381 certificates, eliminating a category of traffic that made up roughly three-quarters of all Solana transactions.

The tradeoff is a tighter Byzantine fault tolerance threshold, dropping from 33% to 20% adversarial stake (plus a separate 20% allowance for offline validators). That's a deliberate exchange for single-round finality, and unlike TowerBFT — which relied on simulation and years of live-network survival — Votor ships with formal safety proofs from a team led by ETH Zurich's Roger Wattenhofer.

For validator operators, the concrete requirement is registering a BLS public key via SIMD-0387 before activation, or stake silently stops counting toward consensus and rewards. For application and infrastructure teams, the bigger shift is conceptual: the gap between 'confirmed' and 'finalized' disappears, meaning polling loops need to move to subscription-based detection, cache invalidation needs to become certificate-aware, and Geyser/gRPC pipelines need resizing now that vote traffic is gone.