- Published on
MetaMask exits Ethereum validators amid undisclosed security incident
- Authors
- Name
- DeepHorus
MetaMask said Wednesday it is responding to a security incident affecting part of its infrastructure and is exiting affected Ethereum validators as a precaution. The company is investigating the undisclosed threat with external partners and security advisers. It said no immediate threat to MetaMask wallets had been identified.
The affected systems are validators within MetaMask’s non-custodial staking operations. MetaMask Staking is offered through MetaMask Portfolio via pooled staking, validator staking and liquid staking through Lido and Rocket Pool. The incident affects a major gateway for users seeking to stake Ethereum.
MetaMask said its infrastructure manages more than $3 billion in staked Ether, according to its website. That scale makes the validator response significant for customers using the service. It also explains why the company moved before disclosing the nature of the incident.
Lido separately said MetaMask Staking had begun taking steps to protect client assets related to validators it operated in the Lido protocol. Those measures included exiting the Ethereum validators on Wednesday. The final validators were expected to exit by Oct. 7, with Ether returning gradually afterward.
Lido Finance developer Will Shannon said the exited Ether should return as validators complete exit, withdrawal and re-entry procedures. He estimated that the full process could take approximately 45 days because of an extended entry queue. That could keep staked Ether outside the protocol for weeks.
MetaMask has not disclosed the security issue or possible consequences. Cointelegraph said it contacted the company but received no immediate response. In the near term, validator exits and client-asset protection remain priorities. Broader risks will depend on the investigation and whether validators can re-enter within the estimated 45 days.
