Timeline
- 7.5
Linea Exits Yield Boost Validators After MetaMask Security Incident, Says Vault Funds Unaffected
In an update posted on X on October 2, 2026, Linea said the validators supporting its Yield Boost vault are being exited as a precaution following the MetaMask Staking incident. Linea stated that the funds and control of the staking vault itself are unaffected. The move makes Linea a second party to pull Ethereum validators in response to the MetaMask Staking incident, extending the incident's operational reach beyond MetaMask's own staking unit. Linea says no vault funds or control were affected and has not asked users to act. Linea reported no loss of principal and no change in control of the vault, and has not asked users to take any action. Yield Boost converts idle bridged ETH into productive capital, with bridged ETH partially staked on Ethereum mainnet via Lido V3.
- 8.0
MetaMask unstakes $1.4B of ETH after validator rewards stolen
MetaMask proactively initiated the exit of about 17,000 affected Ethereum validators holding more than 523,000 staked ETH (roughly $1.4 billion) after block rewards from 18 of its validators were found to have been diverted to an address funded through Tornado Cash. The company said its wallets faced "no immediate threat" and that the issue was confined to its "non-custodial staking operations". The mass exit pushed Ethereum's validator exit queue to its highest level this year, with the estimated withdrawal wait extending from about three and a half days to nearly two weeks. MetaMask has not disclosed whether validator signing keys were exposed, leaving slashing risk and the full scope of the breach unresolved. Security researcher 0xKaden, of Spearbit and Cantina, said block rewards from 18 MetaMask validators were "not paid to the correct fee recipient but instead to this tornado [Cash] funded account"; the address has made no transactions, holds 0.46 ETH including 0.1 ETH funded from Tornado Cash, and received 18 incoming ETH transfers from Titan Relay: Forwarder worth less than $1,000 in total. On-chain analyst Emmett Gallic separately flagged a 133,300 ETH transfer (about $360 million) from wallets labelled "Lubin/ConSensys" a few hours before MetaMask's statement, with no suggestion that transfer was suspicious.