TLDR
- Solflare entered “bunker mode,” requiring multiple approvals for all code and infrastructure changes.
- An October incident at a third-party staking provider affected keys used by Solflare’s validator.
- Solflare says no customer funds were stolen, but affected users stopped earning staking rewards.
- The migration deadline to the new validator is now November 30.
- Solflare will cover missed rewards from October 26 to November 1.
Solana-based wallet Solflare has tightened its internal security controls. The company restricted access to its infrastructure and software changes after a series of attacks across the crypto industry.
Solflare is in bunker mode.
After the month this industry just had, access to our infra and code is shut down, every change needs multiple approvals, and nothing new gets in.
It slows us down and I’m fine with that.
— Vidor | Solflare (@vidor_solflare) November 1, 2026
In a November 2 statement, co-founder Vidor said the development team had entered “bunker mode.” He said the team now requires multiple approvals for every change and has stopped adding anything new.
“After the month this industry just had, access to our infra and code is shut down, every change needs multiple approvals, and nothing new gets in,” Vidor wrote. He said the rules will slow the team down and that he is fine with that.
Solflare Tightens Access to Its Systems
Developers must now get multiple approvals before changing infrastructure or code. The team has paused new additions while the limits stay in place.
The announcement followed an October 29 security breach at Binance involving about $6.3 billion in affected crypto assets. Binance’s early investigation named a possibly compromised engineer’s laptop as one entry point. The exchange said attackers may have reached internal systems used to approve withdrawals.
Another recent case involved customer records from Keystone, a hardware wallet maker. Unauthorized access to its website exposed buyers’ personal information. Keystone said private keys and recovery phrases were not affected, though the exposed data raised phishing concerns.
Brazilian exchange Mercado Bitcoin also suspended customer withdrawals after it found unauthorized activity in its systems. Solflare’s new limits apply to its own operations. Its recent staking problem started with an outside service provider.
Validator Incident Interrupts Staking Rewards
On October 27, Solflare said its third-party staking provider had reported a security incident. The incident involved keys linked to the wallet’s Solana validator. “Our staking provider has notified us of a security incident on their side,” the company said.
The affected validator stopped producing staking rewards while the provider investigated. Solflare said users’ delegated SOL stayed in their own stake accounts, which are controlled by their private keys. “Your SOL is safe,” the wallet said, adding that “No user funds were touched.”
The company said holding validator keys does not let an operator move SOL out of customers’ staking accounts. Data cited by Unchained showed about 1.56 million SOL was delegated to the affected validator on October 28. That validator had stopped voting and no longer earned rewards for those users.
A separate October 29 investigation by Bitquery traced unauthorized transfers from keys tied to several Solana validators, including Solflare’s. The analytics firm estimated the attacker moved about $135,000 in assets from five validators. Bitquery separated assets held by validator operators from customer funds in delegated staking accounts.
Solflare then set up a replacement validator and asked affected users to move their delegated SOL. It first set November 1 as the deadline for users seeking payment for missed rewards. The company has now extended that deadline to November 30.
“You now have until November 30 to move your stake to the new Solflare validator,” the wallet told users.
Solflare will cover staking rewards missed between October 26 and November 1 for users who finish the move. The company added an in-app process to help customers migrate.
Staking rewards restart once the moved SOL becomes active on the new validator. Solana handles activation through network epochs, so some transfers may take extra time. Solflare also warned that scammers could use the migration to spread fake instructions.
“Migration will only happen through the Solflare app. We will never DM you or send you a link,” the company said.
Users can update the app and follow the on-screen steps before November 30 to receive the missed rewards.
