MetaMask Exits Ethereum Validators After Security Incident

MetaMask, the company behind the popular non-custodial cryptocurrency wallet, said on Thursday that it is responding to an "ongoing security incident" affecting part of its infrastructure.

"We are actively addressing and remediating the issue internally, in coordination with external partners and security advisors," the company said in a statement. It stressed that, as of now, no immediate threat to MetaMask wallets has been identified.

MetaMask disclosed no further details about the nature of the incident. As a precautionary measure, the company said it is proactively exiting affected validators within its non-custodial staking operations, working in coordination with clients and partners.

"As a reminder, our staking operations are non-custodial in nature, and we do not manage withdrawal keys for stake on behalf of our clients," it added.

Lido's response

Lido, a decentralized liquid staking protocol for Ethereum, confirmed that MetaMask has taken steps to protect client assets tied to its operated Ethereum validators.

"These steps include exiting its Ethereum (ETH) validators in the Lido protocol, and will likely incur foregone rewards as well as possible downtime penalties should validators be taken offline in the near future to reduce risks related to potential network penalties," Lido said.

The relevant validators have already begun the exit process, with the final ones expected to be exited — though not fully withdrawn — by the end of October 7, 2026.

The story remains developing, and MetaMask has promised to share more details as they become available.

Source: The Hacker News