MetaMask security incident forces Ethereum staking exits, no funds at risk
MetaMask disabled parts of its Ethereum staking infrastructure after a security incident that researchers say diverted about 0.36 ETH in block-production payments. The company said it found no immediate threat to user wallets and has exited affected validators as a precaution, while Lido warned the shutdown could cause missed rewards for affected stakes.
Why It Matters
The incident prompted precautionary exits that a researcher estimated would touch roughly 17,000 validators controlling about 523,000 ETH, creating potential reward losses and temporary disruptions to staking services. Because validators run the network and manage staking rewards, any compromise or operational shutdown can affect staking yields and service availability for large pools of ETH.
Key Facts
- Estimated diverted rewards: 0.36 ETH
- Validators found sending payments to unexpected address: 18 of 19 MetaMask-operated validators that had earned payments
- Precautionary exits estimated by researcher: ~17,000 validators
- ETH covered by those estimated exits: ~523,000 ETH
- MetaMask statement on user wallets: "At this time, we have identified no immediate threat to MetaMask wallets."
MetaMask removed part of its Ethereum staking operations from service after detecting a security incident that affected some of its infrastructure. The wallet and staking operator said it had exited the affected validators as a precaution and reported no immediate risk to customers’ MetaMask wallets.
An independent Ethereum researcher known as Kaden reported on X that 18 of 19 MetaMask-operated validators which had recently earned block-production payments forwarded those payments to an unexpected address. Kaden estimated about 0.36 ETH in rewards was diverted. MetaMask had not publicly confirmed those specific figures or explained the technical cause of the compromise as of Thursday afternoon in Asia.
Kaden also estimated the precautionary shutdown involved roughly 17,000 validators holding about 523,000 ETH, although MetaMask did not verify that tally. Lido, which pools ETH for staking and issues the liquid-staking token stETH, said MetaMask-operated validators had begun leaving its system and that the final validators were expected to stop staking by Oct. 7. Lido warned that exiting and re-entering the staking queue could take up to about 45 days, during which affected validators would miss rewards and could face penalties if taken offline before exits completed. Lido said stETH holders do not need to take action.
The disclosures also coincided with sizable on-chain movements that drew attention. Blockchain tracker Lookonchain tied a wallet to Ethereum cofounder Joseph Lubin and reported a transfer of 133,298 ETH (about $356 million) to a new address, though there was no immediate evidence linking that movement to MetaMask's response. Separately, Ethena temporarily withdrew funds from Morpho amid the security notices — about $75 million from a vault holding RLUSD and $60 million from a holding PYUSD — and later redeployed the funds after receiving clarity, on-chain data showed.
Keep Reading
US Sanctions A7 Network, Proposes Ban on Sub-Agent Payments
SEC Proposes Crypto Self-Custody Route for Investment Advisers
Shevchenko Gives NEAR Intents Attacker 48 Hours
