Solflare's staking provider has validator keys compromised; rewards halted on ~1.6M delegated SOL
Solflare validator (third-party staking provider)
Solana wallet Solflare said on Oct 27 that its third-party staking provider suffered a security incident affecting the keys it holds for the Solflare validator, so the validator no longer earns rewards. Delegated SOL stays in users' own stake accounts and Solflare says no funds were touched. It is preparing an in-app migration to a new validator and a compensation plan, and says migration will happen only inside the Solflare app, never through DMs or links.
Why this severity: Validator keys compromised at a third party; user funds reported safe, rewards paused
- Started
- Oct 27, 2026
Affected
- SOL delegated to the Solflare validator
Fixed in
- Migration to a replacement validator via a coming Solflare app update
Timeline2
Validator trackers show about 1.56 million SOL delegated to the affected node; the provider is still unnamed and investigating.
Solflare discloses that its staking provider's keys for the Solflare validator were compromised; the validator stops producing rewards, user SOL is safe, and a migration plus compensation is being prepared.
Advisories1
News & write-ups2
Posts1
Update on Solflare SOL staking Our staking provider has notified us of a security incident on their side, affecting the keys they hold for the Solflare validator. They are investigating. As a result, the Solflare validator is currently not producing rewards. Your SOL is safe.
Get an email when a new major security incident drops. No spam, unsubscribe any time.
