MetaMask announced on Wednesday that it is taking urgent action to address a security incident that impacted part of its infrastructure. The company reported that it has initiated the process of exiting affected staking validators as a precaution to protect client assets.
Precautionary measures for validator security
The MetaMask team stated that the incident has not posed any immediate threat to user wallets but emphasized its commitment to safeguarding its non-custodial staking operations. According to the announcement, MetaMask is collaborating with external partners and security experts to neutralize the ongoing risk and prevent potential damage.
The company did not disclose specific details regarding the nature or source of the security vulnerability. However, it confirmed that the identified issue was confined to a segment of staking validators rather than the full MetaMask infrastructure.
MetaMask is a widely used cryptocurrency wallet developed by Consensys. The wallet enables users to interact with the Ethereum network, manage digital assets, and access decentralized applications without relying on a centralized third party.
Lido responds as MetaMask exits Ethereum validators
In a related statement, Lido revealed that MetaMask Staking began removing its operated Ethereum validators from the Lido protocol on Wednesday. Lido, a liquid staking protocol for proof-of-stake blockchains, allows users to stake their assets and receive tokenized rewards in return.
Will Shannon, a developer at Lido Finance, explained that the last affected validators are scheduled to exit by the end of October 7. ETH that was managed by these validators will be returned to the protocol incrementally.
ETH exited from MetaMask Staking-operated validators is expected to return to the protocol gradually as the relevant validators complete the exit, withdrawal, and re-entry cycle, which is estimated to take approximately up to 45 days due to the extended entry queue.
Due to high network activity and a substantial entry queue on Ethereum, this validator exit and fund withdrawal procedure is anticipated to span up to 45 days from initiation to completion.
Exiting validators and withdrawing staked assets involve a multi-step process on Ethereum, incorporating an exit request, a waiting period dictated by network congestion, and the finalization of withdrawal transactions to release ETH back to the user or protocol.
MetaMask is working closely with Lido and other security partners during this transition to safeguard user funds and maintain protocol integrity.
Mini dictionary: Lido, a liquid staking protocol, enables users to stake their Ethereum and other digital assets while retaining liquidity by receiving tradable tokens representing their stake. The protocol handles validator operations and simplifies the staking process for end users.
| Event | Entity | Estimated Completion | Key Detail |
|---|---|---|---|
| Validator exit begins | MetaMask Staking via Lido | Started on Wednesday | All affected validators to exit by Oct. 7 |
| ETH return to protocol | Lido | Within 45 days | Gradual return due to network entry queue |
Attempts to contact MetaMask for additional details have yet to yield a response. Updates are expected as MetaMask and its partners continue to monitor and respond to the situation.
