MetaMask began exiting affected Ethereum validators after a security incident was identified in its infrastructure on September 30. The last affected validators are expected to leave their positions by October 7, with network conditions determining the timeline. The company emphasized that its staking service remains non-custodial, and it does not control the keys for clients' fund withdrawals.
As of October 1, no immediate threat to MetaMask wallets had been identified, although details of the incident itself have not been disclosed. MetaMask is working with external partners and security experts. It is expected that ETH withdrawn from validators managed by MetaMask will gradually return to the protocol as the exit, withdrawal, and re-entry process is completed – this cycle may take up to 45 days due to the long queue of validators in Ethereum.
Aave founder Stani Kulechov stated that his markets are unaffected and the protocol is operating as usual. According to MetaMask, it manages over $3 billion in staked Ethereum, making it a primary entry point for users looking to stake their ETH. Lido informed stETH holders that no action is required on their part. Information about the scale of the incident is limited; MetaMask continues to monitor the situation and promises updates as the investigation progresses. MetaMask Staking, formerly known as Consensys Staking, continues to operate under the established security measures.
Related articles
