MetaMask: Security Incident Affects Part of Infrastructure, No Immediate Threat

1. #0109.30
   Initial2026-09-30 23:52 · publication time

   MetaMask: Security Incident Affects Part of Infrastructure, No Immediate Threat

   MetaMask disclosed a security incident affecting part of its infrastructure and is proactively exiting affected validators from its non-custodial staking operations, stating no immediate threat to wallets has been identified.

   Source evidence: wublockchainenglish · theblockbeats

2. #0210.01
   Response2026-10-01 00:00 · publication time

   MetaMask Staking Exits Lido Validators After Infrastructure Compromise

   MetaMask Staking has begun exiting its Lido validators, with Lido estimating an up-to-45-day exit, withdrawal and re-entry cycle; Aave's founder says its markets are operating normally.

   State after update: MetaMask disclosed a security incident affecting part of its infrastructure and is exiting affected validators from its non-custodial staking operations; MetaMask Staking has begun exiting its Lido validators, with Lido estimating the cycle could take up to about 45 days, while Aave's founder says its markets are operating normally.

   Source evidence: The Defiant · theblockbeats · Binance

3. #0310.01
   Escalation2026-10-01 07:06 · publication time

   MetaMask security incident forces Ethereum staking exits, no funds at risk

   New researcher estimates: about 0.36 ETH in block-production payments was diverted and roughly 17,000 validators holding about 523,000 ETH are being withdrawn, though MetaMask has not confirmed those figures; Lido said the last validators are expected to stop staking by Oct. 7 and stETH holders need not act.

   State after update: MetaMask disclosed a security incident affecting part of its infrastructure and has shut down and is exiting affected Ethereum validators; a researcher estimated about 0.36 ETH in block-production payments was diverted and roughly 17,000 validators holding about 523,000 ETH were affected, though MetaMask has not confirmed those figures; Lido said the exit and re-entry cycle could take up to about 45 days, with the last validators expected to stop staking by Oct. 7 and no action needed from stETH holders; MetaMask says it has identified no immediate threat to wallets.

   Source evidence: CoinDesk

4. #0410.01
   Escalation2026-10-01 08:03 · publication time

   【MetaMask 安全事件攻击者盗取了原属于验证者激励的 0.36 ETH】

   On-chain researcher Kaden said that out of 19 validators receiving block rewards in the affected group, 18 rewards were not sent to the intended fee recipient but instead went to an address funded by Tornado Cash, with the attacker actually obtaining about 0.36 ETH; MetaMask has preemptively exited roughly 17,000 validators holding about 523,000 ETH.

   State after update: MetaMask disclosed a security incident affecting part of its infrastructure and has shut down and is exiting affected Ethereum validators; further analysis by on-chain researcher Kaden indicates that out of 19 validators receiving block rewards, 18 rewards were not sent to the intended fee recipient and instead went to an address funded by Tornado Cash, with the attacker actually obtaining about 0.36 ETH; MetaMask has preemptively exited roughly 17,000 validators holding about 523,000 ETH; Lido previously said the exit and re-entry cycle could take up to about 45 days, with the last validators expected to stop staking by Oct. 7 and no action needed from stETH holders; MetaMask says it has identified no immediate threat to wallets.

   Source evidence: foresightnews

5. #0510.01
   Escalation2026-10-01 08:04 · publication time

   Analysis: MetaMask Exits 17,000 Validators After Staking Security Incident

   New: about 821 potentially affected validators remain active, and compromised validator signing keys could pose residual slashing risk; MetaMask said its staking service is non-custodial and it does not control users' withdrawal keys.

   State after update: MetaMask disclosed a security incident affecting part of its infrastructure and has shut down and is exiting affected Ethereum validators; further analysis by on-chain researcher Kaden indicates that out of 19 validators receiving block rewards, 18 rewards were not sent to the intended fee recipient and instead went to an address funded by Tornado Cash, with the attacker actually obtaining about 0.36 ETH; MetaMask has preemptively exited roughly 17,000 validators holding about 523,000 ETH; new information indicates about 821 potentially affected validators remain active, and compromised signing keys could pose residual slashing risk; MetaMask said its staking service is non-custodial and it does not control users' withdrawal keys; Lido previously said the exit and re-entry cycle could take up to about 45 days, with the last validators expected to stop staking by Oct. 7 and no action needed from stETH holders.

   Source evidence: wublockchainenglish

All events · Back to the feed