MetaMask Reports Infrastructure Security Incident, Exits Affected Ethereum Validators

Summary
MetaMask disclosed an ongoing incident affecting some internal infrastructure and says wallets face no immediate threat. As a precaution, it is exiting affected Ethereum validators; Lido warns of missed rewards and possible penalties.
Key points
- MetaMask says an ongoing security incident affects part of its infrastructure but has not disclosed what systems or data were accessed or compromised.
- The company says there is no immediate threat to MetaMask wallets.
- MetaMask is exiting affected validators in its non-custodial staking operations with clients and partners.
- MetaMask says it does not manage withdrawal keys for clients’ stakes.
- Lido Finance says validator exits may cause missed rewards and possible downtime penalties; the final exits were expected by October 7, 2026.
Article Details
- Victim Organization
- MetaMask
- Incident Type
- Infrastructure security incident; specific attack method not disclosed
- Operational Impact
- MetaMask Staking began exiting affected Ethereum validators as a precaution. Lido Finance said this may result in foregone rewards and possible downtime penalties. MetaMask said there was no immediate threat to MetaMask wallets. Whether systems or data were accessed or compromised was not disclosed.
- Ransom Or Extortion
- None reported
- Claim Status
- confirmed
Vendors
Products
EthereumAs a precaution, MetaMask Staking is exiting affected Ethereum validators in coordination with clients and partners, while Lido Finance says the process may result in missed rewards and possible penalties.Lido FinanceAs a precaution, MetaMask Staking is exiting affected Ethereum validators in coordination with clients and partners, while Lido Finance says the process may result in missed rewards and possible penalties.MetaMaskMetaMask has disclosed an ongoing infrastructure security incident affecting part of its internal systems, but says there is no immediate threat to MetaMask wallets.
Industries
BlockchainValidators are nodes on the Ethereum network that run software responsible for proposing blocks, verifying crypto transactions, and maintaining the security of the Ethereum blockchain.CryptocurrencyOn Thursday, cryptocurrency wallet provider MetaMask has disclosed an ongoing infrastructure security incident affecting some of its infrastructure.