MetaMask · security
MetaMask Exits Ethereum Validators After Security Incident
MetaMask is exiting affected Ethereum validators after an infrastructure security incident, while saying it has identified no immediate threat to MetaMask wallets.
Are MetaMask wallets or staked ETH at risk?
MetaMask says it has identified no immediate threat to wallets, and its non-custodial staking operation does not control clients' withdrawal keys. The investigation is still ongoing.
Orbitrum Investor Impact
How much ETH is affected by the validator exits?
An Ethereum security researcher estimated that roughly 17,000 validators holding about 523,000 ETH were being exited, but MetaMask has not confirmed those figures.
Was any staking income diverted?
The researcher estimated that about 0.36 ETH in block-production payments was diverted to an unexpected address. CoinDesk reported no indication that the underlying staked ETH was redirected.
Why do the validator exits matter economically?
Lido says the affected validators will forgo staking rewards while out of service and could incur downtime penalties. The exit, withdrawal and re-entry cycle could take up to about 45 days.
What happens next?
Lido expects the final affected validators to exit by the end of October 7, 2026, although their ETH will not necessarily be withdrawn by then. MetaMask says its investigation and remediation remain underway.
Sources
- MetaMask — User update
- Lido Governance — [Security Disclosure] MetaMask Staking Precautionary Out of Order Exits
- CoinDesk — MetaMask exits Ethereum validators after attacker diverts staking rewards
Original signal: CoinDesk ↗
See more Orbitrum in Google
Add Orbitrum as a Preferred Source to make our research more likely to appear for you in Google Search.