MetaMask said it is dealing with an ongoing security incident affecting part of its infrastructure and is withdrawing Ethereum validators run by its staking business as a precaution. The company said it has found no immediate threat to MetaMask wallets.
The issue involves MetaMask’s non-custodial staking operation, previously known as Consensys Staking. According to the company, it is exiting affected validators while working with outside partners and security advisers to investigate and remediate the problem.
Incident confined to staking operations so far
MetaMask described the event as an infrastructure compromise tied to its validator business rather than its wallet product. It said no immediate risk to user wallets has been identified, but it did not disclose which internal systems were affected, how the breach occurred, or whether any user data was exposed.
The company also emphasized the structure of its staking service. MetaMask said it does not control withdrawal keys on behalf of clients, meaning it can operate validator signing but cannot move the underlying staked assets.
Lido validator exits are already under way
The most visible response is happening on Lido, where MetaMask Staking said it started exiting validators after its investigation uncovered the compromise. The final validators are expected to be exited, though not yet fully withdrawn, by the end of October 7.
Lido said stETH holders do not need to take any action. MetaMask said the main effect should be on rewards during the process rather than on user access to funds.
Exit process may take weeks to fully clear
Even after validators are exited, the underlying ETH will not return all at once. MetaMask said the assets will move back to Lido gradually as validators pass through the exit, withdrawal, and re-entry cycle.
That process could take as long as 45 days because of the lengthy validator entry queue. The company also warned that rewards could be reduced further if validators are taken offline before they complete their exit, a measure it may use to lower slashing risk.
Lido points to buffers as investigation continues
Lido said its broad set of node operators helps limit concentration risk around any single operator. It also referenced an ad hoc reserve fund of more than 6,750 stETH as an additional buffer while the validator exits proceed.
MetaMask said a full investigation is under way and that more updates will be provided when available. For now, key unanswered questions include which part of MetaMask’s infrastructure was compromised and whether the incident reached beyond the staking business.
Source: www.blockhead.co