Candy Digital: SOL drained from 1,500+ platform-created wallets; refunds promised
11–12 Oct 2026 (late catch for our board): digital-collectibles platform Candy Digital locked its site after unauthorized SOL withdrawals from wallets it had generated for users.
Community counts put losses around 400+ SOL (~$43K–$45K) across 1,500+ wallets. Candy's terms say its systems can access signing credentials for Candy embedded wallets. Candy has not confirmed a figure or a cause.
It froze NFT transfers and sales (two internal audits found no NFTs lost so far), told users to move SOL to a brand-new wallet never linked to Candy, and says it is preparing to reimburse drained Solana before a platform reboot.
No security firm has sized the incident. Research snapshot from Candy's blog and X updates.
369 take
If the platform made the wallet and can sign for it, one breach can empty every wallet at once. That is custodial risk in a self-custody costume. Users: move remaining SOL off any Candy-linked wallet.
Refunds, if they land, do not change the design.
Sources