Solflare Validator Stops Generating Staking Rewards
Solflare, a non-custodial wallet for Solana, is preparing to move users’ delegated SOL to a replacement validator after a third-party staking provider reported a security incident involving keys held for the existing validator.
In an official post on X published at 7:26 p.m. Eastern Time on October 27, 2026, Solflare said its staking provider had notified the company about a security incident affecting the keys it held for the Solflare validator. The provider was investigating the issue, and the validator had stopped producing staking rewards.
Solflare did not identify the provider in its announcement or explain when the incident began, how the keys were affected, or whether an unauthorized party accessed them. The immediate impact confirmed by the wallet was a halt in reward generation, while the company said users’ staked SOL remained safe.
Around 1.56 Million SOL Is Delegated to the Validator
Blockchain validator data showed that a substantial amount of SOL was delegated to the affected node. Stakewiz listed 1,559,012 SOL delegated to the validator as of 13:05 UTC on October 28, 2026. The validator was marked delinquent and had recorded zero vote credits so far in epoch 1070.
The Stakewiz validator page provides validator performance and staking information. A separate Validators Solutions listing also showed approximately 1.56 million SOL and a delinquent status.
A delinquent validator is one that is not performing its expected network duties, such as voting on blocks. Solana staking rewards depend on validator performance, so a node that stops participating can leave its delegators without rewards during the affected period. The reported stake figure represents SOL delegated to the validator, not a confirmed loss of those assets.
Why Solflare Says Users’ Staked SOL Remains Safe
Solflare emphasized that the incident had not affected users’ principal. In its announcement, the wallet explained that delegated SOL remains in each user’s stake account, controlled by the account’s authorized keys.
“No user funds were touched,” Solflare said, adding that the Solana protocol does not allow a validator or someone holding its validator keys to withdraw delegated stake directly from a delegator’s account.
This separation between validator operations and stake-account authority is an important feature of Solana’s staking design. The network’s official stake-account documentation explains that stake accounts have separate authorities for managing delegation and withdrawing funds. Control depends on the authorities assigned to the account, rather than simply on the validator receiving the delegation.
However, the safety of the delegated principal does not mean staking continues normally. While the affected validator is unable to produce rewards, users may miss staking income. Moving stake to another validator can also involve protocol-defined activation periods, so rewards may not resume immediately when a migration is initiated.
Solflare Prepares an In-App Migration
Solflare said it is switching to a new validator and that users’ delegated stake will need to move to the replacement. The company has not announced a launch date for the migration or specified when the new validator will become available.
For now, Solflare says users do not need to take action. An upcoming app update is expected to guide affected stakers through the migration process. The company said rewards would remain paused until users’ stake becomes active on the new validator.
Solflare is also developing a compensation plan for users who complete the migration. It has not disclosed the amount, eligibility calculations or payment mechanism. The final terms will determine how the company addresses the period in which affected delegators are unable to earn staking rewards.
Security Warning: Follow Only Solflare’s Official Migration Process
The incident also creates an opportunity for scammers to impersonate wallet support teams and offer fake migration links. Solflare explicitly warned users that the migration would take place only through its official app.
The company said it would never contact users through direct messages or send them a link to complete the migration. It also said it would publish an update on X when the migration process becomes available.
Users should therefore avoid unsolicited messages, third-party migration websites and requests to reveal recovery phrases or private keys. They should wait for instructions inside the Solflare app and confirm updates through the wallet’s official communication channels.
What Happens Next for Affected SOL Stakers?
The next milestones are the provider’s investigation, the launch of Solflare’s replacement validator, the release of the in-app migration process and publication of the compensation plan. The provider’s identity and the technical details of the security incident were not disclosed in Solflare’s initial announcement.
The scale of the affected delegation—approximately 1.56 million SOL—makes the validator’s recovery and the migration process important developments for its delegators. Still, the reported figure should not be confused with funds lost: Solflare’s stated position is that users’ principal remains in their own stake accounts.
For now, the confirmed effects are a halt in validator rewards and a planned transition to replacement infrastructure. The duration of the interruption, the final compensation terms and the findings of the provider’s investigation remain unresolved.
