Solflare Validator Goes Down, Rp2.6 Trillion in Staked SOL Affected
Baca dalam 60 detik
- Validator Solflare berhenti beroperasi setelah mitra pihak ketiga mengalami insiden keamanan, membuat 1,56 juta SOL (sekitar US$160 juta) kehilangan imbal hasil.
- Dana pengguna tetap aman karena staking terkunci di akun masing-masing, namun terungkap bahwa validator bermerek Solflare itu selama ini dijalankan perusahaan lain.
- Solflare menjanjikan kompensasi bagi pengguna yang bermigrasi ke validator baru, tetapi prosesnya tidak instan dan berpotensi menjadi celah penipuan.
Solflare, a digital wallet for the Solana blockchain, has promised to compensate for lost staking yields after its partner validator went down due to a security incident on Tuesday night US time. The event exposed about 1.56 million SOL tokens worth roughly US$160 million (around Rp2.6 trillion) still delegated to the validator, according to Stakewiz data on Wednesday afternoon.
The incident began when a third-party company hired by Solflare to operate the validator reported a security breach affecting the cryptographic keys it held. As a result, the validator stopped producing yields. Solflare did not disclose the identity of the partner, but acknowledged that the validator marketed as its own was in fact run by another entity.
For users, the good news is that principal assets were not lost. In its statement, Solflare stressed that staked SOL remains in each user's stake account and can only be controlled by their private keys. Holders of the validator key can halt validator operations, but they have no access to withdraw anyone's funds. "No user funds were touched," the company said, as quoted in its official announcement.
Although funds are safe, users still lose potential staking income while the old validator is not operating. Solflare has activated a replacement validator and said it will cover missed yields for every user who migrates. The process can be done by choosing a regular unstaking from the "Solflare (Legacy)" validator and then restaking to the new validator, or by waiting for an app update that will guide users step by step.
However, migration cannot be instantaneous. Stake changes on the Solana network only take effect at the end of an epoch, a period lasting about two days. That means the old stake must be stopped first before the new stake starts generating yields. This gap opens an opportunity for cybercriminals to launch phishing attacks. Solflare stressed that the migration process will only take place inside the official app and that it will never send direct messages or links to users about this matter.
"We urge users not to respond to any message claiming to be from Solflare and directing them to a particular link. Migration only happens inside the app," Solflare said in its statement.
The incident highlights an operational risk that is often overlooked in the cryptocurrency staking ecosystem, especially when a platform outsources validator infrastructure. Although the model is common for efficiency, transparency about who actually runs the validator becomes crucial. Users have the right to know who controls the validator keys, because it concerns the continuity of their yields.
In Indonesia, where cryptocurrency asset adoption continues to grow, this event is a reminder for investors to look beyond high yields and understand the governance structure behind staking services. Domestic regulators, through Bappebti and OJK, have emphasized the importance of transparency and risk management in the digital asset sector. Cryptocurrency wallet users are advised to check validators' track records and understand recovery mechanisms in the event of a disruption.
Going forward, Solflare's efforts to restore trust will be tested. The big question: will its compensation promise and a smooth migration be enough to retain users, or will it instead trigger an exodus to competing platforms offering validators with more transparent track records?
