Solflare says staking provider security incident halted its validator’s rewards

Solflare, the non-custodial Solana wallet, says a security incident at one of its staking providers has stopped its validator from earning rewards. The good news is that user funds are not part of the damage.

The company announced the incident on October 27, 2026. It said the problem involved private keys held by an unnamed staking provider. Because of that, the Solflare validator can no longer earn or distribute rewards to the users who delegated to it.

What actually broke

Solflare places the issue in the key management of the staking provider, not in user wallets. The company says delegated stakes are still sitting in each user’s own stake account, fully under that user’s control.

On Solana, delegating SOL to a validator does not hand your coins to that validator. The tokens remain in a stake account you control. The validator gets credit for the stake when it helps run the network, and you get a cut of the rewards.

So when the provider’s keys were compromised, the validator lost its ability to do its job. It did not gain, and never had, the ability to touch user deposits.

The incident appears contained to the provider’s key handling. Solflare frames it as no threat to user wallets or to the broader Solflare ecosystem.

The fix: move and get paid for it

Solflare is preparing an app update that will walk users through migrating their stake to a new validator. The company says the goal is to get rewards flowing again soon.

It is also planning a compensation strategy for users who complete the migration. Solflare has not attached a figure or formula to that compensation in its announcement.

Rewards are expected to be paused only during the transition period. Once a user’s stake is pointed at the new validator, earning should resume.

For now, the story rests on Solflare’s own statements. As of the announcement, major crypto outlets such as CoinDesk and The Block had not published their own coverage of the incident.

Background on Solflare

Solflare launched in 2020 and has grown into one of the better known wallets in the Solana ecosystem. Its pitch has always centered on letting users stake SOL without giving up control of their assets.

Solflare also has a record of communicating publicly about security matters. It previously addressed the Drift Protocol issue in April 2026, a track record that frames how this latest disclosure is likely to be read by users.

What this means for Solana stakers

The immediate cost for affected users is lost yield during the downtime. Their principal is untouched, but every day the stake sits on a non-earning validator is a day without rewards.

The compensation details will matter too. Users will want to know whether the payout roughly matches what they would have earned, or whether it is closer to a goodwill gesture. Solflare has not yet said which it will be.

For users, the practical steps are simple. Watch for the Solflare app update, migrate stake when prompted, and keep an eye on how the compensation is calculated.