Solflare, an application functioning as a wallet for the Solana network, announced that it will compensate its users for the yields they failed to receive following an issue at a third-party vendor that rendered its staking validator inactive, while approximately $160 million worth of SOL (SOL) was allocated to it.
Through staking, holders of SOL tokens are able to generate returns. They delegate their coins to a validator—a computer system that assists in verifying transactions and maintaining Solana’s ledger—and receive a portion of the generated payouts as long as that validator remains operational. Solflare operates its own designated validator so that participants can perform staking activities directly inside the interface.
On Tuesday evening in the United States, Solflare stated that the firm responsible for managing its validator reported “a security incident on their side, affecting the keys they hold for the Solflare validator.”
The identity of the company was not disclosed by Solflare. The node ceased generating payouts, and roughly 1.56 million SOL remained assigned to it by Wednesday afternoon, as indicated by Stakewiz data.
The digital assets themselves remain secure. Staked SOL “sits in your own stake account and is controlled by your keys alone,” according to Solflare, and “no user funds were touched.” Whoever possesses a validator’s private keys can halt its revenue generation, but lacks the ability to withdraw anyone’s staked capital.
Participants forfeit their earnings temporarily. They also learned that, despite bearing the Solflare brand name, the validator had actually been operated by a separate organization the entire time.
Moving out
Solflare reported Wednesday that a substitute validator is operational and that it will reimburse all uncollected profits for individuals who transition to it. Clients can initiate this by opting for standard unstaking from “Solflare (Legacy)” prior to staking with the fresh validator, or wait for an upcoming application update that will guide them through the procedure.
Nevertheless, the transfer does not happen immediately, because stake modifications only become effective upon the conclusion of each epoch—a timespan lasting roughly forty-eight hours on Solana—implying that the previous stake must fully deactivate before the new one commences generating yield.
A widespread migration additionally presents an opportunity for malicious actors. Solflare emphasized that the transfer will take place exclusively within its application, noting that it will never contact users directly or provide an external link regarding the transition.
Originally published at https://www.coindesk.com/markets/2026/10/29/solana-wallet-solflare-pledges-to-pay-missed-rewards-on-staked-usd160-million-after-validator-goes-offline.
