preferred on
Points of Focus
- MetaMask is exiting Ethereum validators after discovering a security incident affecting part of its infrastructure.
- Lido expects the final affected validators to exit by Oct. 7, while returning the ETH to active staking could take up to 45 days.
- MetaMask has not disclosed the cause, number of affected validators, or amount of Ether involved.
MetaMask has started exiting Ethereum validators after discovering a security incident affecting part of its infrastructure. The company disclosed the incident on Sept. 30 and brought in external partners and security advisers as remediation began.
MetaMask has identified no immediate threat to its wallets. Its staking operation is non-custodial and does not manage withdrawal keys for staking on behalf of clients, according to the company.
Security Update: We are responding to a security incident affecting part of our infrastructure.
At this time, we have identified no immediate threat to MetaMask wallets.
As a precaution, we are proactively exiting affected validators within our non-custodial staking operations,…
— MetaMask 🦊 (@MetaMask) September 30, 2026
MetaMask validators begin leaving Lido
The exits involve MetaMask Staking, formerly Consensys Staking. Lido expects the final Ethereum validators covered by the security response to complete their exits by the end of Oct. 7, though they will not be fully withdrawn by then. Holders of Lido staked Ether (stETH) do not need to take action.
The scope remains unclear. MetaMask has not disclosed how many validators or how much Ether (ETH) are affected, what caused the incident, or whether validator signing keys were exposed.
The incident comes during MetaMask’s separation from Consensys, announced in September as the company begins operating as an independent consumer-focused business. The wallet has also expanded its supported networks over the past year, including native Bitcoin support. Other major security incidents this year include the $351.6-million Bitget breach, the fake GIWA network that attracted 767.65 ETH, and the earlier $285-million Drift Protocol exploit.
Ethereum validator reentry faces extended queue
Lido estimates that ETH from the affected validators could take up to 45 days to complete the full exit, withdrawal, and reentry cycle because of Ethereum’s extended validator entry queue. The Oct. 7 target covers the validator exits themselves, with withdrawals and subsequent reentry continuing afterward.
The process could result in foregone staking rewards and potential downtime penalties if validators are taken offline before completing the exit process, according to Lido.
Following an investigation into an infrastructure compromise, MetaMask Staking (ex Consensys Staking) has taken precautionary steps to protect client assets related to its operated Ethereum validators.
These steps include exiting its Ethereum (ETH) validators in the Lido… https://t.co/nsox7h0I5k
— Lido (@LidoFinance) September 30, 2026
An exited validator cannot simply be reactivated. Ethereum’s staking documentation explains that once a validator has exited and its full balance has been withdrawn, staking the ETH again requires activating a new validator.
Lido has handled precautionary exits before
Lido has faced a similar case before. In September 2025, staking provider Kiln exited its Ethereum validators after a compromised GitHub access token allowed an attacker to access production infrastructure.
In its postmortem, Kiln described large-scale validator replacement as operationally disruptive because validator keys cannot simply be rotated. Existing validators must exit before new ones can enter the network.
MetaMask plans to publish further updates as the investigation progresses.
Share
Most read articles
