Solflare Says Staking Provider Key Incident Stopped Validator Rewards

Solflare said on Oct. 27 that a security incident at its staking provider halted rewards for users delegated to the Solflare validator, and that it is preparing a migration to a new validator with compensation for stakers who move. The non-custodial Solana wallet said user funds were not affected.

In a post on X published at 7:26 p.m. ET on Oct. 27, Solflare wrote that its "staking provider has notified us of a security incident on their side, affecting the keys they hold for the Solflare validator." The provider is investigating, the post said, according to Unchained's report. Solflare did not name the provider, say when the incident occurred, or explain how the keys were affected. Unchained described it as the third-party provider that runs the node, which reported a security problem involving the validator's keys.

Delegated SOL "sits in your own stake account and is controlled by your keys alone," Solflare wrote, adding that Solana's design prevents a validator's key holders from pulling stake out of a delegator's account. "No user funds were touched." Crypto Briefing reported the same day that the issue sits in the provider's key management rather than in user wallets.

On Solana, delegating SOL to a validator does not hand coins to that validator. The tokens remain in a stake account the delegator controls. The validator receives credit for the stake when it helps run the network, and the delegator receives a cut of the rewards. When the provider's keys were compromised, the validator lost the ability to do that work, but it never had the ability to touch user deposits.

The incident appears contained to the provider's key handling, and Solflare frames it as no threat to user wallets or the broader ecosystem, Crypto Briefing reported.

Delegated stake left delinquent

Delegators lose income while the node is down. Solana validators earn rewards for themselves and their stakers by voting on blocks. Stakewiz listed 1,559,012 SOL delegated to the Solflare validator as of 13:05 UTC on Oct. 28, marked it delinquent, and showed zero vote credits so far in epoch 1070, the report said. Validators.solutions also showed about 1.56 million SOL and a delinquent status.

Solflare said it is switching to a new Solflare validator, so users' stake "will need to move too." No action is required yet, the company said, and an upcoming app update will walk users through the move. It gave no date for that update.

Rewards stay paused "until your stake is active on the new validator," Solflare said, and the company is "working on a compensation plan for everyone who migrates." It did not say how large that compensation would be or how it would be calculated.

The wallet warned stakers that the migration "will only happen through the Solflare app" and that it will never contact them by direct message or send them a link about it. Solflare said it would post on X as soon as the migration path goes live.

Compensation details still open

Crypto Briefing noted that Solflare has not attached a figure or formula to the compensation in its announcement, and that the immediate cost for affected users is lost yield during the downtime. Solflare launched in 2020 and is among the better-known wallets in the Solana ecosystem, pitching staking without giving up control of assets. The company previously addressed the Drift Protocol issue in April 2026, the report said. As of the announcement, major crypto outlets such as CoinDesk and The Block had not published their own coverage of the incident, and the story rests on Solflare's own statements.

Users who do not migrate will keep earning nothing on the affected delegation. Solflare has not said whether compensation will roughly match the rewards users would have earned during the pause or take some other form, and it has not disclosed how many users delegated to the validator in total beyond the figures carried by the staking trackers.