Solflare validator is not producing rewards after a staking-provider incident
Solflare says its staking provider reported a security incident. The validator is not producing rewards. Delegated SOL stays in users' stake accounts, and stakers need not act for now.
On 28 October 2026, Solflare wrote on X that its staking provider had reported a security incident on the provider’s side. The Solflare validator is not producing rewards.
The incident affects the keys the provider holds for the Solflare validator. The provider is investigating.
According to Solflare, delegated stake sits in the user’s own stake account and is controlled only by that user’s keys. The Solana protocol does not allow the validator to move that stake. The same limit applies to anyone who holds the validator’s keys.
Solflare writes that no user funds were touched. The post says stakers do not need to do anything for now. Their stake will still have to move to a new Solflare validator.
An app update is to include a guided move there. Solflare says it will post on X once that update is available. Rewards stay paused until the stake is active on the new validator.
Solflare is working on a compensation plan for everyone who moves. Migration runs only in the Solflare app. Solflare writes that it will never send a direct message or a link.
How we measured. At 9:02 a.m. Berlin time on 28 October 2026, getVoteAccounts returned 1,559,012.37 SOL of activated stake for vote account EXhYxF25PJEHb3v5G1HY8Jn8Jm7bRjJtaxEghGrUuhQw. The query listed that vote account as delinquent.
Stakewiz and validators.app list the same vote account under the name Solflare. The identity is 722RdWmHC5TGXBjTejzNjbc8xEiduVDLqZvoUGz6Xzbp. The post does not name the vote account.
What to watch
- When Solflare says the app update is available
- What the compensation plan contains
- Whether Solflare names the staking provider
Sources
- Solflare — Post on X, 28 October 2026, 12:26 a.m. Berlin. The post has no further link.
- Solana RPC, getVoteAccounts —
https://api.mainnet-beta.solana.com, 28 October 2026, 9:02 a.m. Berlin. Vote accountEXhYxF25PJEHb3v5G1HY8Jn8Jm7bRjJtaxEghGrUuhQw, identity722RdWmHC5TGXBjTejzNjbc8xEiduVDLqZvoUGz6Xzbp, activatedStake 1,559,012,371,506,943 lamports (1,559,012.371506943 SOL), delinquent list. Epoch 1070, slot 462,401,344. - Stakewiz — Solflare validator, name Solflare, website solflare.com, activated_stake 1,559,012.371506943 SOL, delinquent, as of 28 October 2026, 8:55 a.m. Berlin
- validators.app — Solflare vote account, active stake 1,559,012.37 SOL, name Solflare, read 28 October 2026