Solflare says staking provider security incident halted its validator’s rewards

Solflare is a non-custodial Solana wallet that, like most retail staking products, does not run its own validator hardware; it delegates user SOL to third-party node operators who handle block production and key custody. That split between wallet interface and validator infrastructure is standard practice across Solana staking services. On Tuesday evening, at 7:26 p.m. ET, Solflare told users its outsourced operator had reported a security incident involving the validator's signing keys, halting reward production.

For the roughly 1.56 million SOL delegated to the affected node, holders keep their principal in their own stake accounts but stop earning rewards until the keys are replaced. Solflare's fix is an in-app migration that will move delegators to a new validator, a manual step users will need to approve rather than something that resolves on its own. Until that migration lands, affected stakers are locked out of yield while facing no direct loss of principal.

The episode tests how much 'non-custodial' promises actually cover. Solflare is right that stake accounts remain owned by users and untouched, since Solana's architecture keeps delegated SOL separate from a validator's operating keys. But reward generation still depends on a single third party's key hygiene, a dependency invisible to most delegators until it breaks. A wallet can be non-custodial for funds and still carry concentrated operational risk for income.

Watch Solflare's in-app migration tool: its rollout date, and whether delegators must manually re-stake or get moved automatically, will determine how quickly reward flow resumes for the 1.56 million SOL affected. Also open is whether the unnamed staking provider discloses what compromised its validator keys, since that answer shapes whether other wallets relying on the same operator face parallel exposure.