Solflare said it will reimburse missed staking rewards after a security incident at an unidentified outside company knocked its Solana validator offline. About 1.56 million SOL, valued at roughly $160 million, remained delegated to the validator while it was no longer earning rewards.

What Happened to the Staked SOL

Solflare said the outside company had reported a security incident involving the keys it held for the wallet’s validator. The validator subsequently stopped earning staking rewards, affecting users who had delegated their SOL through Solflare’s app.

The wallet said the underlying tokens remain safe. Staked SOL is held in user-controlled stake accounts, and the validator keys can affect the validator’s ability to operate and earn rewards but cannot be used to withdraw users’ delegated funds.

• Approximately 1.56 million SOL was delegated to the offline validator.
• The stake was worth about $160 million based on the report’s valuation.
• Users temporarily lost access to staking rewards, not ownership of their tokens.
• Solflare has not identified the outside firm that held the validator keys.

The incident also highlighted that the validator branded as Solflare’s had been operated by another company, adding a layer of counterparty risk for users who assumed the wallet handled the infrastructure directly.

Migration to a Replacement Validator

Solflare said a replacement validator is now live and pledged to cover missed rewards for users who move their stake to it. Users can begin the process by selecting regular unstaking from “Solflare (Legacy)” and then staking with the new validator. The wallet also said an upcoming app update will guide users through the transition.

The migration will not happen immediately. Solana stake changes take effect at the end of an epoch, a period of roughly two days. Users must therefore wait for the old stake to deactivate before the replacement validator can begin earning rewards on their behalf.

Solflare warned users to complete the process only inside its official app. The instruction is intended to reduce exposure to phishing attempts and scams that could exploit confusion around the validator change.

What This Means

The episode shows how validator-operator failures can interrupt staking income even when the underlying assets remain secure. For Solflare users, the promised reimbursement reduces the direct financial impact, but the incident may prompt closer scrutiny of how wallets disclose third-party infrastructure arrangements.

For the wider Solana ecosystem, the event underscores the difference between custody risk and operational risk. User-controlled stake accounts protected the principal, while dependence on an external validator-key operator interrupted rewards. The several-day migration window also means affected users may continue to experience a temporary earnings gap as stake moves between validators.