Overview
- MetaMask disclosed on Sept. 30 that part of its infrastructure was under a security incident and began proactively exiting the Ethereum validators it runs inside the Lido staking protocol.
- Lido set an operational milestone that the last affected validators should reach the exited state by Oct. 7, and warned that withdrawals and re‑entry could stretch into a roughly 45‑day cycle because of Ethereum’s validator queue.
- On‑chain researcher Kaden reported that block‑fee payments from 18 of 19 recently paid MetaMask validators were redirected to an unexpected address, estimating about 0.36 ETH diverted and roughly 17,000 validators (about 523,000 ETH) pulled as a precaution; MetaMask and Lido have not confirmed those exact numbers.
- Both companies say no user withdrawal keys appear to be compromised and there is no confirmed slashing or loss of staked principal so far, but MetaMask is working with external security advisers and a full investigation remains underway.
- Operators and protocols warn stETH holders they need not act now, while noting the exits will likely cause missed rewards and potential downtime penalties, and industry observers point to prior node‑operator incidents as precedent for this precautionary response.