Security

Solana

Rewards

Solana wallet provider Solflare has suspended staking rewards on its validator following a security incident involving a third-party staking operator, affecting roughly 1.6 million SOL delegated to the service.
The <a href="https://x.com/solflare/status/2115223521395896530" rel="noopener noreferrer nofollow">October 27 disclosure</a> confirmed that the incident affected validator keys held by an external provider, leaving the Solflare validator unable to generate rewards. The provider is investigating the compromise, while Solflare prepares to migrate affected delegations to a replacement validator.
Solflare stressed that customer funds remain secure, with no reported losses or unauthorized transfers from users’ staking accounts. The disruption affects reward generation rather than ownership or custody of the underlying SOL.
<h2 id="validator-key-incident-disrupts-solflare-staking">Validator Key Incident Disrupts Solflare Staking</h2>
The affected provider manages keys associated with Solflare’s validator infrastructure, which processes transactions and participates in Solana’s proof-of-stake consensus.
The incident prevented the validator from performing its normal reward-generating duties. Solflare has not identified the provider or disclosed how the keys were compromised, whether an attacker used them to perform unauthorized operations, or the precise timing of the security incident.
Validator monitoring data shows approximately <a href="https://explorer.rated.network/v/EXhYxF25PJEHb3v5G1HY8Jn8Jm7bRjJtaxEghGrUuhQw?network=solana&amp;timeWindow=7d" rel="noopener noreferrer nofollow">1.6 million SOL delegated</a> to Solflare’s validator, placing a substantial amount of delegated stake under the affected reward-generating operation.
Unlike <a href="https://cryptoadventure.com/the-ultimate-guide-to-the-different-types-of-crypto-staking/" rel="noopener noreferrer nofollow">custodial staking services</a>, Solana’s native delegation mechanism keeps tokens in stake accounts controlled by their owners. Validator operators cannot withdraw the principal using their validator signing keys.
The affected infrastructure therefore cannot directly transfer users’ delegated SOL, although its inability to operate normally interrupts rewards until those positions are moved to a functioning validator.
<h2 id="solflare-prepares-validator-migration-and-compensation">Solflare Prepares Validator Migration and Compensation</h2>
Solflare is establishing a replacement validator and developing an application update to guide users through transferring their delegations.
Affected customers do not need to take immediate action. Once the updated application becomes available, users will be able to complete the migration through an official in-app process.
Staking rewards will remain suspended until the delegated SOL becomes active on the replacement validator.
Solflare is also developing a compensation plan for users who complete the migration. The company has not disclosed the proposed payout amount, calculation method or distribution schedule.
The wallet provider emphasized that migration instructions will appear exclusively inside the Solflare application. Its team will not send private messages or external links requesting wallet connections, recovery phrases or transaction approvals.
<h2 id="incident-follows-other-crypto-infrastructure-breaches">Incident Follows Other Crypto Infrastructure Breaches</h2>
Solflare’s disruption follows several security incidents involving external service providers and cryptocurrency infrastructure in recent weeks.
On October 1, <a href="https://cryptoadventure.com/metamask-exits-lido-validators-after-infrastructure-security-incident/" rel="noopener noreferrer nofollow">MetaMask exited Lido validators</a> following a security incident affecting its staking infrastructure. The wallet provider initiated precautionary validator exits while maintaining that customer withdrawal credentials had not been compromised.
Coinbase also <a href="https://cryptoadventure.com/coinbase-denies-data-breach-as-amplitude-vendor-exposes-customer-information/" rel="noopener noreferrer nofollow">disclosed a separate third-party security incident</a> on October 27 involving analytics provider Amplitude. That exposure affected limited customer contact information rather than staking operations, with Coinbase confirming that its internal systems and customer assets were unaffected.
The incidents involved different systems and operational consequences. Solflare’s immediate disruption is limited to validator performance and missed staking rewards, with delegated principal remaining under customer control.
Solflare has not announced a release date for its guided migration update or finalized the compensation terms. The provider’s investigation remains underway, and affected delegators are awaiting the new validator’s activation before rewards can resume.
The post <a href="https://cryptoadventure.com/solflare-halts-staking-rewards-after-validator-provider-security-breach/" rel="noopener noreferrer nofollow">Solflare Halts Staking Rewards After Validator Provider Security Breach</a> appeared first on <a href="https://cryptoadventure.com" rel="noopener noreferrer nofollow">Crypto Adventure</a>.

Solflare Halts Staking Rewards After Validator Provider Security Breach

Table of Contents

Crypto Adventure

Other articles published on Oct 28, 2026

Join our free newsletter for daily crypto updates!