Solflare's staking provider has validator keys compromised; rewards halted on ~1.6M delegated SOL
Teaser from the source
Solana wallet Solflare said on Oct 27 that its third-party staking provider suffered a security incident affecting the keys it holds for the Solflare validator, so the validator no longer earns rewards. Delegated SOL stays in users' own stake accounts and Solflare says no funds were touched. It is preparing an in-app migration to a new validator and a compensation plan, and says migration will happen only inside the Solflare app, never through DMs or links.
This is the RSS-feed teaser. Read the full article at the original source.
Read at pwn.watchMore on compromised
Other advisories
- Not ratedosv:CLEANSTART-2024-BH66439compromised content process could have performed session history manipulations it should not have been able to due to testing infrastructure that was not restricted to testing-only configurations
- Not ratedosv:CLEANSTART-2024-AH68885fully compromised ESXi host can force VMware Tools to fail to authenticate host-to-guest operations, impacting the confidentiality and integrity of the guest virtual machine
- Not ratedosv:CLEANSTART-2026-RB02560WebFlux application with a compromised subdomain (for example, compromised via cross-site scripting (XSS)) is vulnerable to an escalation attack exchanging a known session ID for that of an authent...
- Not ratedosv:CLEANSTART-2024-DK66902As part of a winning Pwn2Own entry, a researcher demonstrated a sandbox escape by installing a malicious language pack and then opening a browser feature that used the compromised translation
- Not ratedosv:CLEANSTART-2024-DY60209compromised content process could send a message to the parent process that would cause the 'Click to Play' permission prompt to be shown
- Not ratedosv:CLEANSTART-2024-UQ28182compromised content process could have performed session history manipulations it should not have been able to due to testing infrastructure that was not restricted to testing-only configurations
- Not ratedosv:CLEANSTART-2024-UQ62409By generally accepting and passing resource handles across processes, a compromised content process might have confused higher privileged processes to interact with handles that the unprivileged pr...
- Not ratedosv:CLEANSTART-2024-KC30952If a compromised content process sent an unexpected number of WebAuthN Extensions in a Register command to the parent process, an out of bounds write would have occurred leading to memory corruptio...
Other news entries
- Password manager mSecure tells users to change passwords, won't say whyNewsThe Register — Security
- One Compromised Laptop, Billions Lost: The Binance Attack-Path WarningNewsDark Reading
- The Rise of LLMJacking: How Threat Actors Monetize Compromised Cloud and Model ResourcesNewsGoogle Threat Intelligence
- A compromised DevOps laptop caused the $6.3B Binance breachNewsCSO Online
- Polymarket Returns $3.9 Million to Traders as DebugBear Cites DNS HijackNewsSecurityWeek
- b14g: about 97M CORE drained from its Core staking contracts; contracts pausedBreachpwn.watch
- Binance links $6.3 billion crypto theft to compromised DevOps laptopNewsBleepingComputer
- $6 Billion Binance Hack Bears Hallmarks of North Korea’s TraderTraitorNewsSecurityWeek
Source: https://pwn.watch/i/solflare-staking-provider-validator-key-compromise-oct-2026
ID