MetaMask announces security incident in part of infrastructure and exits affected validators from staking

MetaMask writes that it has so far found no direct threat to wallets, and its staking is noncustodial: it does not control withdrawal keys for client funds. Lido reports that the last MetaMask Staking validators will exit by the end of 7 October 2026, return of ETH to the protocol will take up to 45 days, and remaining stETH holders do not need to do anything. There are no early precursors in the collected material.

Facts

MetaMask on 30.09.2026 at 23:38 UTC wrote that it is responding to a security incident affecting part of the infrastructure, and has so far identified no immediate threat to wallets.
MetaMask as a precaution is exiting the affected validators within noncustodial staking, together with clients, partners and security consultants. [@MetaMask, 30 September 2026]
Lido reports that MetaMask Staking is withdrawing its Ethereum validators from the protocol after investigation of an infrastructure compromise. Lost rewards and downtime penalties are possible, the last validators will exit by the end of 7 October 2026.
According to Lido, return of ETH to the protocol will take up to 45 days due to the long entry queue. No action is required from stETH holders, the protocol reserve fund is over 6,750 stETH. [@LidoFinance, 30 September 2026]
MetaMask does not manage withdrawal keys for client staked funds. The investigation continues, updates are promised. [@coinbureau, 30 September 2026]

Awaiting

What exactly was compromised and how many validators are affected, MetaMask promises to describe in further updates.

post from telegram channel BWEnews · post from telegram channel zoomerfiednews · post from telegram channel Korean Alpha EN