MetaMask Begins Validator Exits as Security Investigation Continues
MetaMask is investigating an ongoing security incident affecting part of its infrastructure and has begun precautionary exits from affected Ethereum validators. The company said it has identified no immediate threat to MetaMask wallets.
The disclosure came Sept. 30 as MetaMask said it was working with external partners and security advisers to address and remediate the issue. The company did not disclose what system was compromised, how the incident occurred, or whether attackers accessed customer information.
Validator exits underway
MetaMask said the precaution targets validators within its non-custodial staking operations. It also emphasized that it does not manage withdrawal keys for customers’ staked assets.
Lido separately confirmed that MetaMask Staking had started exiting Ethereum validators operated through its protocol. The affected validators are expected to complete the exit process by Oct. 7.
The move could temporarily reduce staking rewards associated with the exiting validators. Lido said the ETH must pass through Ethereum’s exit and withdrawal process before it can return to staking.
The full exit, withdrawal and re-entry cycle could take up to about 45 days because of the current validator entry queue. Validators that go offline before completing their exits could also face downtime-related penalties.
What remains unknown
MetaMask has not disclosed the number of affected validators or the amount of ETH involved. It also has not said whether the infrastructure incident affected systems beyond its staking operation.
For wallet users, the company’s current assessment separates the infrastructure incident from direct wallet security. MetaMask says it has found no immediate wallet threat while its investigation continues.
The company said it will continue monitoring the situation and provide additional updates as appropriate. The incident remains under investigation, leaving the scope and technical cause of the compromise unresolved.
