Solflare's staking provider has validator keys compromised; rewards halted on ~1.6M delegated SOL
Teaser from the source
Solana wallet Solflare said on Oct 27 that its third-party staking provider suffered a security incident affecting the keys it holds for the Solflare validator, so the validator no longer earns rewards. Delegated SOL stays in users' own stake accounts and Solflare says no funds were touched. It is preparing an in-app migration to a new validator and a compensation plan, and says migration will happen only inside the Solflare app, never through DMs or links.
This is the RSS-feed teaser. Read the full article at the original source.
Read at pwn.watchMore on compromised
Other advisories
- Not ratedosv:CLEANSTART-2024-UQ28182compromised content process could have performed session history manipulations it should not have been able to due to testing infrastructure that was not restricted to testing-only configurations
- Not ratedosv:CLEANSTART-2024-UQ62409By generally accepting and passing resource handles across processes, a compromised content process might have confused higher privileged processes to interact with handles that the unprivileged pr...
- Not ratedosv:CLEANSTART-2024-KC30952If a compromised content process sent an unexpected number of WebAuthN Extensions in a Register command to the parent process, an out of bounds write would have occurred leading to memory corruptio...
- Not ratedosv:CLEANSTART-2024-RF75506attacker who compromised a content process could have partially escaped the sandbox to read arbitrary files via clipboard-related IPC messages
- Not ratedosv:CLEANSTART-2024-PI68890compromised content process could have provided malicious data in a `PathRecording` resulting in an out-of-bounds write, leading to a potentially exploitable crash in a privileged process
- Not ratedosv:CLEANSTART-2024-LQ05343compromised content process could have provided malicious data to `FilterNodeD2D1` resulting in an out-of-bounds write, leading to a potentially exploitable crash in a privileged process
- CriticalCVE-2026-115557Distrust compromised intermediate certificates in ssl module
- CriticalCVE-2026-115557Distrust compromised intermediate certificates in ssl module
Other news entries
- Binance links $6.3 billion crypto theft to compromised DevOps laptopNewsBleepingComputer
- $6 Billion Binance Hack Bears Hallmarks of North Korea’s TraderTraitorNewsSecurityWeek
- Polymarket halts trading after crypto-draining script breach, $2.5M tracedNewsBleepingComputer
- Ireland's Employment Permits Portal taken offline after unauthorised activity; names, emails and roles may be exposedBreachpwn.watch
- Polymarket halts trading after a compromised third-party provider drains user wallets through its websiteBreachpwn.watch
- Binance says its $6.3B hack went beyond a compromised DevOps laptop; it will cover all losses and about $3B is frozenBreachpwn.watch
- Sony ISP subsidiary data breach exposes 2.5 million customer recordsNewsBleepingComputer
- Volt Typhoon hides zero-day attacks using 'Silent Train' frameworkNewsBleepingComputer
Source: https://pwn.watch/i/solflare-staking-provider-validator-key-compromise-oct-2026
ID