Solflare, a wallet for the Solana blockchain, says it will compensate eligible users for staking rewards missed after a security incident at a third-party service provider knocked its validator offline. About 1.56 million SOL, worth roughly $160 million, was delegated to the affected validator. Solflare says users’ staked tokens remain in their own accounts and were not accessed during the incident. A replacement validator is now available, and users who migrate their stake can qualify for coverage of missed rewards, according to the company’s updates.
What Caused the Solflare Outage?
Solflare disclosed the incident on October 27, saying its external staking provider had reported a security issue involving the keys used to operate the wallet’s validator. The company did not publicly identify the provider or provide a full technical explanation of the incident.
The validator subsequently stopped earning rewards. Data from Stakewiz showed approximately 1.56 million SOL delegated to the validator on October 28, when it was marked delinquent.
The incident highlights the distinction between a validator’s operating keys and the keys controlling users’ funds. On Solana, staking generally involves delegating tokens through a stake account while retaining control of the account through the user’s own keys. A validator outage can interrupt rewards without automatically giving its operator the ability to withdraw delegated principal.
Solflare said no user funds were touched. The immediate financial impact for affected stakers is therefore the interruption to staking income, rather than a reported loss of their deposited SOL.
Replacement Validator and Compensation
Solflare announced that a replacement validator was live and said it would cover missed rewards for users who move their stake to the new validator. The precise compensation formula and payment timetable have not been publicly detailed in the available reports.
Moving stake is not instantaneous. On Solana, changes in delegation take effect through the network’s epoch process, with each epoch lasting roughly two days. Users may therefore experience a delay before their stake becomes active on the replacement validator and begins earning rewards again.
Users should follow Solflare’s official in-app instructions for the migration. The company has warned that the process will take place through its app and that it will not send direct messages or unsolicited links asking users to move their funds.
Security Risks and What Users Should Know
The incident has also raised questions about reliance on outside infrastructure. Although Solflare offers staking through its wallet, a third party operated the affected validator, demonstrating how external service providers can disrupt rewards even when user-held funds remain protected.

Users should keep these points in mind:
- Principal: Solflare says users’ staked SOL was not affected.
- Rewards: Income was interrupted while the original validator was offline.
- Migration: Users need to follow the verified process to move their stake and qualify for the stated compensation.
- Scams: Avoid unsolicited messages, suspicious links and requests for recovery phrases or private keys.
Conclusion
Solflare’s response aims to restore staking rewards without compromising users’ control over their SOL. The replacement validator and compensation commitment offer a path forward, but users should verify official instructions and await further details on reimbursement. The incident also underscores the importance of understanding the infrastructure behind crypto staking services.
Sources & Methodology
Primary-source standard: Market-moving facts should link to original data releases, regulator notices, company filings or official project announcements whenever available. Secondary reporting is used for additional context, not as a substitute for original evidence.
Page last reviewed:
