MetaMask Exits Ethereum Validators After Infrastructure Breach Diverts 0.36 ETH

Small apparent theft, large operational response

A security researcher’s analysis indicates that around 0.36 ETH, worth less than $1,000 at roughly $2,700 per ether, was redirected from MetaMask-operated validators. MetaMask disclosed the incident at 7:38 p.m. Eastern time on Sept. 30 and said it was responding to a compromise in part of its infrastructure while beginning proactive validator exits.

On Oct. 1, the company said there was still no indication that MetaMask wallets or customer funds had been affected. Even so, researchers tracking onchain activity described a much broader defensive move than the value of the diverted block tips would suggest.

What researchers say the attacker changed

MetaMask has described its staking setup as non-custodial, meaning it does not control customers’ withdrawal keys. Those keys are required to withdraw the underlying stake, so access to validator infrastructure would not by itself allow an attacker to remove the deposited ETH.

According to researcher Kaden, the issue appears to have involved fee-recipient settings rather than withdrawals. In his reconstruction, 19 MetaMask validators received block rewards and payments, but 18 of those rewards were sent to the wrong address. He said that address had been funded through Tornado Cash, and another reconstruction placed the suspicious activity within roughly a four-and-a-half-hour window on Sept. 30.

Why validator exits may have been necessary

Changing the fee recipient can redirect block tips without touching the validator’s 32 ETH stake. The bigger concern, researchers said, is whether an attacker could have obtained validator signing keys. Those keys still would not allow direct withdrawal of stake, but they could potentially be used in conduct that triggers Ethereum slashing penalties.

Kaden said three exploited validators had not yet exited when he posted his analysis, and he estimated that about 821 potentially affected validators remained active at that point. In a separate review, Bitquery counted 16,965 validators holding 565,056 ETH that had exited or joined the queue by Oct. 1. Those totals differ from Kaden’s estimate of roughly 17,000 validators with about 523,000 ETH because the two analyses measured different sets at different times. MetaMask has not publicly confirmed either figure.

Bitquery also estimated that a hypothetical simultaneous slashing of around 17,000 validators could have destroyed roughly 22,000 ETH. Its reconstruction did not show any validators being slashed, but the scenario helps explain why MetaMask appears to have chosen a broad shutdown and exit process.

Lido expects a longer path back online

Lido confirmed that validators operated by MetaMask Staking are being removed from its protocol and said it expects the affected validators it uses to complete their exits by the end of Oct. 7. Restarting them is expected to take much longer, because validators must first clear Ethereum’s exit process, withdraw, and then wait through the entry queue before staking again.

Lido said the full cycle could take up to about 45 days, leaving the affected stake out of service and not earning validator rewards during that period. Beaconcha.in data cited in the report showed about 393,795 ETH already waiting to leave Ethereum’s validator set, with an estimated four days and six hours to clear the exit queue before an additional withdrawal delay.

What is confirmed next

For now, MetaMask continues to say users do not need to take action and has warned wallet holders not to share recovery phrases with anyone claiming to offer protection. Lido likewise said stETH holders do not need to do anything.

The key confirmed milestones are the expected completion of affected Lido-linked validator exits by Oct. 7 and the possibility that re-entry could take several more weeks. What remains unclear is how far the intruder’s access extended beyond the apparent diversion of block tips.