MetaMask has begun exiting certain Ethereum validators following a security incident that impacted a portion of its infrastructure. The company announced that it is working in collaboration with external partners and security consultants to address the issue.
Security incident and response
In a brief statement, MetaMask asserted that there is “no immediate threat to MetaMask wallets.” However, specific technical information, such as which systems were impacted, has not been disclosed. The company emphasized that, as a precaution, it is removing affected validators from its non-custodial staking operations.
MetaMask, a widely used Ethereum wallet developed by Consensys Software Inc., provides users with tools to store, manage, and stake digital assets. Its non-custodial staking model allows customers to retain control of their assets and staking rewards while the validator infrastructure is managed by MetaMask.
The company clarified that it does not control client withdrawal keys, which ensures that users maintain authority over their staked funds. MetaMask has not reported any cases of slashing, theft of client stakes, unauthorized withdrawals, or access to validator signing keys.
MetaMask stated that it is “proactively exiting affected validators within our non-custodial staking operations” and has “identified no immediate threat to MetaMask wallets.”
Public disclosures as of October 1 did not include details about the nature of the attack, the number of validators impacted, or the total amount of ETH involved. The company has yet to release a completion date for its internal investigation but maintains communication with users, partners, and security advisors throughout the process.
MetaMask Staking transition and company restructuring
The security incident involved MetaMask Staking, previously known as Consensys Staking. In September, Consensys Software Inc. revealed it would begin operating under the MetaMask brand. As part of this restructuring, the company’s protocols and institutional infrastructure will transition to a newly established entity, with the transition expected to be finished by the end of 2026.
The non-custodial design of MetaMask Staking allows users to retain their withdrawal keys, ensuring self-custody of deposits and rewards while MetaMask operates the validator node.
Mini dictionary: Consensys Software Inc. is a blockchain technology company that develops Ethereum-based infrastructure and applications, including MetaMask, a major non-custodial crypto wallet.
Lido protocol sets validator exit timeline
Lido Finance, a leading decentralized staking protocol, provided additional information on the matter in a post to its governance forum. A Lido representative described the incident as an “infrastructure compromise” affecting validators operated by MetaMask Staking within the Lido protocol. As a result, those validators have begun the exit process.
Lido anticipates that the final affected validators will reach the exit stage by the end of October 7, though the full withdrawal and reallocation of ETH may extend for up to 45 days due to Ethereum’s validator entry and exit queue.
The protocol noted that there had been no slashing incidents to date. Lido’s network consists of more than 600 node operators and a reserve fund holding over 6,750 stETH to help absorb potential disruptions.
Lido’s update also reassured stETH holders that “No action is required from stETH holders.” However, the organization warned that the exit process could cause temporary losses in staking rewards and potential downtime penalties if validators go offline before exits are finalized.
| Protocol | Exit Target Date | Full Withdrawal Timeframe | Reserve Fund | Node Operators |
|---|---|---|---|---|
| Lido | By Oct. 7 | Up to 45 days | 6,750+ stETH | 600+ |
Reactions from DeFi ecosystem
Stani Kulechov, founder of Aave, addressed the situation on October 1, stating that Aave’s decentralized lending markets had not experienced any disruption. Operations and markets within the Aave protocol are continuing as normal despite the concerns around MetaMask’s validator infrastructure.
MetaMask and Lido have both indicated that comprehensive investigations are still ongoing and that users will remain informed as further details become available.
