Solana wallet Solflare has locked down internal systems and frozen new code changes after a wave of high-profile crypto attacks, putting its engineering team into what co-founder Dmitry “Vidor” called “bunker mode.” In a November 2 post, Vidor said the company has shut down access to infrastructure and source code, requires multiple approvals for any change, and halted new deployments. “After the month this industry just had, access to our infra and code is shut down, every change needs multiple approvals, and nothing new gets in,” he wrote, adding bluntly, “It slows us down and I’m fine with that.” The measures are intended to harden who can access and authorize changes to Solflare’s systems. The move follows several recent incidents that have shaken the industry. On October 29, Binance disclosed a major security breach involving roughly $6.3 billion in affected assets; Binance’s preliminary probe pointed to a possibly compromised engineer laptop as an entry point and said attackers accessed infrastructure used to authorize withdrawals. Around the same time, Keystone — a hardware wallet maker — suffered unauthorized access to its website that exposed customer records (Keystone says private keys and recovery phrases were not leaked, but the data exposure raised phishing concerns). Solflare’s immediate operational pain stemmed from a third-party staking provider. On October 27 the provider reported a security incident affecting keys tied to Solflare’s Solana validator. The validator stopped producing rewards while the provider investigated, though Solflare stressed that users’ delegated SOL remained in their individual stake accounts and “Your SOL is safe. No user funds were touched.” The firm emphasized that validator operator keys do not permit transfers from users’ delegated accounts. Blockchain monitoring cited by Unchained showed about 1.56 million SOL delegated to the affected validator as of October 28. Separately, analytics firm Bitquery traced unauthorized transfers from keys associated with several Solana validators (including ones tied to Solflare), estimating roughly $135,000 in assets moved from five validators — while distinguishing operators’ funds from users’ delegated staking balances. To remediate, Solflare spun up a replacement validator and started directing users to migrate their delegated SOL. It initially set a November 1 deadline to qualify for compensation for missed staking rewards, but has since extended that migration deadline to November 30. Solflare says it will cover staking rewards missed between October 26 and November 1 for users who complete the in-app migration. The company rolled out an in-app migration flow and urged users to update the Solflare app and move stakes there; it warned migration instructions will come only through the official app and cautioned against DMs, links, or phishing attempts. Solflare’s response is part of a broader industry trend of emergency lockdowns after attacks: for example, Brazil’s Mercado Bitcoin paused withdrawals after detecting unauthorized activity. For Solflare users the immediate steps are clear — update the wallet app, complete the in-app validator migration by November 30 to resume staking and claim covered missed rewards, and follow only official Solflare channels to avoid scams. Read more AI-generated news on: https://app.chaingpt.org/news