Solflare Will Repay Missed Rewards After a Validator Serving $160 Million in SOL Went Offline
• October 29, 2026 7:13 am • CommentsSolflare has moved from warning users about a validator outage to promising to make affected stakers whole for the rewards they missed.
The important distinction is that this was not a loss of users’ delegated SOL. It was an infrastructure failure that stopped one validator from doing the work required to earn staking rewards.
According to CoinDesk, roughly 1.56 million SOL—about $160 million at the time—was delegated to the affected validator. Solflare said an outside company that operated the validator reported a security incident involving validator keys.
The validator then stopped producing rewards. CoinDesk also reported that Solflare brought a replacement online, promised reimbursement for missed rewards and told users to move through the wallet rather than trust direct messages or outside links.
A validator’s operating keys do not give it ownership of every token delegated to it. The staked SOL remains in each user’s stake account and is controlled by that user’s keys.
An offline validator can therefore stop earning without gaining the ability to withdraw users’ principal.
Solflare made that distinction explicit in its first public update:
Update on Solflare SOL staking
Our staking provider has notified us of a security incident on their side, affecting the keys they hold for the Solflare validator. They are investigating. As a result, the Solflare validator is currently not producing rewards.
Your SOL is safe.…
— Solflare – The Solana Wallet (@solflare) October 27, 2026
That still left users with a real cost. A validator that misses votes and block production stops generating the normal stream of staking rewards.
Even when the underlying SOL is safe, every missed epoch matters to people who chose the service for yield.
A separate Bitquery investigation traced activity affecting several validators and emphasized the same core point: the affected vote-account activity did not grant access to users’ stake accounts. Its onchain analysis adds useful context to Solflare’s statement without turning an operational outage into a claim that delegated SOL was stolen.
Solflare says it has now brought a replacement validator online. Users can begin a regular unstake from “Solflare (Legacy)” and then delegate to the new validator, or wait for an app update intended to guide the move.
Update on Solflare SOL staking
The new Solflare validator is live. Your SOL is safe, and no user funds were touched.
To migrate now, unstake from Solflare (Legacy) with regular unstake, and stake on the new validator. Or wait for an app update that will move you over in a few… https://t.co/boo8lBeLHq
— Solflare – The Solana Wallet (@solflare) October 28, 2026
The move is not instant. Solana stake activation and deactivation occur around epoch boundaries, so users may wait several days while the old delegation winds down and the new one starts earning.
Solflare says it will reimburse missed rewards for users who migrate. That pledge recognizes that “funds are safe” does not fully answer the economic harm from downtime.
Users will need clear eligibility rules, a reliable migration path and reimbursement that matches the actual missed period.
Any mass wallet migration creates an opening for impersonators. Solflare has warned users to complete the move only inside its app and said it will not contact people directly with migration links.
That warning matters as much as the technical instructions. A legitimate validator outage can become a theft if users hand credentials or recovery phrases to someone pretending to offer support.
For now, the evidence supports a narrow conclusion: delegated SOL remained under user control, the legacy validator stopped earning, a replacement is available, and Solflare has committed to cover missed rewards for users who move. The incident is a reminder that staking remains exposed to operational dependencies even when custody itself is not breached.
Join the conversation!
We have no tolerance for comments containing violence, racism, profanity, vulgarity, doxing, or discourteous behavior. If a comment is spam, instead of replying to it please click the icon below and to the right of that comment. Thank you for partnering with us to maintain fruitful conversation.
