Overview
- MetaMask disclosed the infrastructure security incident on Sept. 30 and has begun proactively exiting the validators it operates inside Lido’s node set.
- MetaMask says its staking service is non‑custodial and that it does not control client withdrawal keys, and the company reported no immediate threat to MetaMask wallets.
- Lido says the final affected validators should reach the exited state by Oct. 7 and that the full exit, withdrawal and re‑entry cycle could take about 45 days because of Ethereum’s entry queue.
- An independent researcher reported that block‑production fees from some MetaMask validators were diverted (about 0.36 ETH) and estimated roughly 17,000 validators were being withdrawn, but MetaMask and Lido have not confirmed those figures or reported slashing or loss of principal.
- Major DeFi services have so far reported normal operations, Lido advised stETH holders to take no action, and protocol buffers and distributed operators are being relied on as the investigation and remediation with external advisers proceed.