Solflare and other Solana validator keys (October 2026) hack — October 2026
Incident facts
| Date of incident | |
|---|---|
| Publicly disclosed | October 27, 2026 |
| Target type | Mining or staking operation |
| Loss | $135,000Price at time of incident |
| Method | Private key compromiseIdentity and vote-account keys for five Solana validators, including Solflare’s, were held by one attacker; Solflare says its staking provider reported a security incident affecting the keys it held |
| Chains | Solana |
| Outcome | Unresolved |
What happened
On 27 October 2026 the wallet Solflare told users that its staking provider, which it did not name, had reported a security incident affecting the keys it held for the Solflare validator. Rewards stopped on the roughly 1.56 million SOL delegated to it. Solflare said no user funds were touched, which the chain supports: delegated SOL sits in stake accounts that a validator’s keys cannot empty.
Bitquery then traced what was taken. On 26 October one attacker used the keys of five Solana validators, and took about 1,343 SOL worth, about $135,000, from validator identity and vote accounts. Most of the value was 637 JitoSOL. Bitquery names validators run by Solflare, Blockdaemon and Astraeus, one known only by its address, and one Slow Ventures stopped running in 2024, and says it found no public statement from Blockdaemon or Astraeus by 29 October. The money crossed to Ethereum through Bridgers and Chainflip and 57.0 ETH went into Tornado Cash.
The loss fell on the validator operators. Stakers lose rewards while the validators sit out, and Solflare is moving stake to a new validator and says it is working on a compensation plan for those who migrate.
Sources
- Solflare on X (27 October 2026)Primary · retrieved 2026-10-31
- Bitquery investigation (October 2026)Secondary · retrieved 2026-10-31
- Unchained (28 October 2026)Secondary · retrieved 2026-10-31
Changes to this entry
- Amount is Bitquery’s on-chain count, the only published total. Solflare has not named its provider or stated a loss.
Cite this
This data is published under CC BY 4.0. You may reuse it, including commercially, as long as you credit iTokenly and link back.
iTokenly Hack Registry, "Solflare and other Solana validator keys (October 2026) hack — October 2026", iTokenly, accessed 2026-10-31, https://itokenly.com/hacks/solana-validator-keys-solflare-october-2026https://itokenly.com/hacks/solana-validator-keys-solflare-october-2026Permalinks never change. If an entry is renamed, the old address keeps working.
Spotted an error? Write to [email protected]. Corrections to published figures are logged on this page. See the methodology for how entries are checked.