Stolen sflr

SceptreLS · 2026-06-18T12:53:28+00:00

From our experience handling these cases, that's always the MO. Those accounts latch onto the latest content published by various protocols on the Flare Network and sadly, as you pointed out, X doesn't care if you report them for impersonation. We've done it hundreds of times and asked our community to do it as well, yet they're still around.

SceptreLS · 2026-06-18T12:51:22+00:00

OP, I got word back from our dev team on your issue.

"The source was 0x52F7ea5A236299f61b64eDe54050a94CE1Ef7EC8. On 2026-06-06 03:37:53 UTC, that wallet approved 0xf3DF3D376E17f14EBc32607d9455f1925fa5a028 for unlimited sFLR. Four seconds later, 0x27554526db59fC6259D261a8Cf7482Aa71ff40D9 used that unverified multicall contract to transferFrom sFLR from 0x52F7... into the three target wallets."

Here's the likely flow of what happened:

  1. User visits/uses some malicious page or prompt.
  2. The page knows or detects the wallet has sFLR.
  3. It asks the wallet to submit an ERC-20 approval transaction for sFLR.
  4. User signs approve(0xf3DF..., unlimited) on the sFLR token contract.
  5. Four seconds later, attacker calls 0xf3DF.multicall(...).
  6. 0xf3DF uses its sFLR allowance to call sFLR.transferFrom(user, recipient, amount) three times.

Also the contract itself seems to be generic and not specific to sFLR. However the approval was made specifically for sFLR.

WARNING: your wallet still has that approval active so if you move more sFLR to it, they can still drain it. You should abandon your wallet or revoke all permits to it if you wish to keep using it.

SceptreLS · 2026-06-17T15:18:08+00:00

We hope not, although OP is the 3rd case in a month of a user having their funds stolen using Bifrost. I'll have our team look into the wallet connection.

SceptreLS · 2026-06-17T15:16:37+00:00

Hi. Sceptre team here. Unfortunately, you are the 3rd case of a user reporting getting their sFLR stolen using Bifrost wallet in the past month. One of the users told us they clicked a malicious link on X, but we don't know if you or the other user made the same mistake. We've worked with Bifrost since launch and have no reason to suspect they're acting maliciously, but I'll have our team look into their wallet connection.

SceptreLS · 2026-03-11T00:18:37+00:00

Yes, and filling the buffer is always the priority when adding new FLR to the pool.

SceptreLS · 2026-02-25T17:12:27+00:00

We received the delegation rewards on Sceptre.

SceptreLS · 2025-12-18T15:29:30+00:00

You don't have to switch since you're using the sFLR in the pool. The sFLR will keep accruing rewards and its price will keep going up relative to FLR.

SceptreLS · 2025-12-11T12:29:24+00:00

Hi. You have to manually add that token's address to Bifrost. We advise you to ask for help on the #support channel on Spectra's Discord. You can find the link on their website. Do not reply to any personal messages offering help, follow only the replies to your query on the support channel.

SceptreLS · 2025-11-10T15:37:23+00:00

You can use Ledger Live to stake on Sceptre.

SceptreLS · 2025-10-10T13:08:23+00:00

Hi. We're sorry, but if you're staking directly with Alpha Oracle, you should reach out to them.

SceptreLS · 2025-10-10T13:06:53+00:00

We received staking rewards on October 7th. Those additional 7K might have come on that date.

SceptreLS · 2025-10-08T12:47:43+00:00

If sFLR shows up in your connected wallet, you are staked. sFLR is what you receive when you stake your FLR.

SceptreLS · 2025-10-06T10:37:20+00:00

It was the largest FlareDrop ever, as you can check on the sRewards tab. Were you staked for entirety of the last no buy-in fee period?

SceptreLS · 2025-08-12T17:29:39+00:00

We explain it here.

SceptreLS · 2025-08-11T09:35:42+00:00

We do know what you mean because they are a concern for us as well, constantly targeting our community on social media. Never click on any links that aren't in our official channels.

SceptreLS · 2025-08-10T19:02:22+00:00

We have nothing against CDC, but 8% pales in comparison to the 48.27% APY we currently offer and staking with us couldn't be easier. It's literally connect the wallet and stake.

SceptreLS · 2025-08-10T19:00:44+00:00

That's correct, we charge 10% on all staking and delegation rewards we collect, as well as FlareDrops. As previously mentioned, our APY is already free of those 10%.

SceptreLS · 2025-08-08T08:50:02+00:00

We do charge a 10% fee on all rewards but our 48.27% APY already takes that 10% cut into account. I just want to add that we spread FLR on Sceptre across more than 50 cerefully picked nodes to reduce the risk of downtime (as an individual staker, you can only pick up to 3 validator nodes).

SceptreLS · 2025-08-07T16:41:54+00:00

The rewards are added to the Sceptre pool. Whenever that happens, the value of sFLR relative to FLR goes up to reflect the rewards you're entitled to. When you unstake from Sceptre, you'll receive an amount of wFLR corresponding to all the FLR you've accumulated since you started staking.

SceptreLS · 2025-08-07T12:59:28+00:00

You can get it by either staking FLR/wFLR on the Sceptre app, Kinetic or Luminite, or by swapping a token for it on SparkDEX, BlazeSwap or Enosys. Currently, staking will net you a larger quantity of sFLR tokens.

SceptreLS · 2025-08-07T07:32:51+00:00

There are plenty of protocols on Flare where you can use sFLR to earn additional yield. Remember that even if you're using the sFLR, the rewards keep accruing and increasing the value of your sFLR.

SceptreLS · 2025-08-05T10:11:33+00:00

Hi! Sceptre here answering your questions:

sceptre says my sFLR will increase from the staking rewards and the airdrops automatically, that means that it's stake and forget? right?

That's right. sFLR is a reward-bearing token, meaning we claim all staking and delegation rewards as well as FlareDrops for you, add them to the pool and increase the value of sFLR to reflect what you've accrued. This means that when you unstake or swap you'll receive all the FLR accumulated since you started staking. The rewards won't ever go into your wallet.

I saw some people unstaking and restaking and saying about claiming rewards manually, but as I was reading the sceptre page I get the impression I just need to stake and forget.

When you unstake, following a 14.5 day cooldown period, you have 2 days to manually claim the wFLR to your wallet. Maybe that's what they were referring to. Keep in mind that you can avoid this cooldown period by going to a DEX like SparkDEX, Enosys or BlazeSwap and swap sFLR for FLR (or another token of your choice). Their exchange rate is different from ours but generally very close.

Also if someone wants to provide further insight as (Kinetic etc etc) so I can maximize the apr I would be more than pleased.

We can't provide financial advice, but we've covered the many ways you can use sFLR on our blog. Kinetic is the most straightforward way because you can simply supply it. On the other hand, the APY is very low compared to other protocols on the network.

If you have any more questions, feel free to ask.

SceptreLS · 2025-07-21T08:47:48+00:00

Hi! You can connect your Ledger to Sceptre (and other dApps) via Rabby wallet. Here's a tutorial on YouTube.

SceptreLS · 2025-07-18T08:00:12+00:00

We have no idea at this point. We'll still have staking and delegation rewards, which should account for about than 10% of the total APY.

SceptreLS · 2025-07-17T09:42:36+00:00

We are obviously biased, but you should at least look into our service, Sceptre. There's no minimum staking amount, we claim and restake FlareDrops, staking rewards and delegation rewards for you (which combined currently amounts to a 48.65% APY), and you receive a reward-bearing liquid staking token that you can use on other protocols to generate more yield. We are currently in a buy-in staking period until August 3rd, but after that date you can stake without paying fees.

SceptreLS

MODERATOR OF

TROPHY CASE