MetaMask Exits Validators After Security Incident

MetaMask is exiting affected Ethereum validators as a precaution after a security incident involving part of its infrastructure, while the company says it has identified no immediate threat to its wallets. Lido, whose protocol operates some of the affected validators, said the final exits are expected by October 7, with the broader process of withdrawal and reentry potentially taking up to about 45 days. MetaMask said on September 30 that it was responding to the incident and working with external partners and security advisers. It has not disclosed what systems were affected, how the incident occurred or whether any information or validator signing keys were accessed. The company said it would continue monitoring the situation and provide updates as its investigation develops. The validator exits are a precautionary step within MetaMask’s noncustodial staking operations. MetaMask says it does not hold clients’ withdrawal keys. Lido said MetaMask Staking began exiting validators in its protocol on Wednesday, September 30. The October 7 estimate concerns completion of the exit stage, not necessarily the return of all associated ETH or the end of the full process.