Overview
- Solflare entered “bunker mode” on November 2, requiring multiple approvals for any infrastructure or code change and pausing new additions to reduce its attack surface.
- The wallet provisioned a replacement Solana validator and extended the deadline to move delegated stakes to November 30 while adding an in‑app migration flow to guide users.
- Solflare said users’ delegated SOL remained in individual stake accounts controlled by private keys so no customer funds were moved; the firm will reimburse missed staking rewards for October 26–November 1 for users who migrate through the official app.
- Blockchain monitoring cited about 1.56 million SOL delegated to the affected validator on October 28, and analytics firm Bitquery traced roughly $135,000 in unauthorized transfers tied to several validator operator keys.
- Solflare warned users to only use the official app for migration to avoid phishing, and its lockdown reflects wider industry caution after recent large breaches that exposed operator keys and customer data.