TLDR
- MetaMask began exiting Ethereum validators after a security incident affected its staking infrastructure.
- Researcher Kaden estimated diverted block payments at 0.36 ETH; MetaMask has not confirmed his findings.
- MetaMask reported no immediate threat to wallets, while neither MetaMask nor Lido reported slashing.
- Lido expects affected validators to stop staking by October 7, with withdrawal and restaking potentially taking 45 days.
- Affected validators face missed rewards, but Lido said stETH holders need not take action.
MetaMask has started removing Ethereum staking validators from service after a security incident affected part of its infrastructure. The company disclosed the issue Wednesday and described the exits as a precaution. Lido warned that the disruption could reduce staking rewards.
MetaMask Reports Validator Security Incident
MetaMask said it had found no immediate threat to its wallets. However, it had not explained how attackers accessed its systems by Thursday afternoon in Asia. MetaMask also operates staking services alongside its wallet.
Ethereum security researcher Kaden reported that 18 of 19 MetaMask validators receiving block payments sent those earnings to an unexpected wallet. He estimated the diverted funds at about 0.36 ETH.
The incident comes during continued interest in Ethereum staking. September 29 coverage of Ethereum whale accumulation placed roughly 35% of ETH supply in staking.
Researcher Estimates Thousands of Validator Exits
Kaden estimated that the precautionary exits covered approximately 17,000 validators holding around 523,000 ETH. MetaMask has not confirmed either figure. Validators run software that checks transactions and helps secure Ethereum.
after some onchain sleuthing, i think this is what happened:
19 metamask validators had won block rewards, and 18 of the rewards were not paid to the correct fee recipient but instead to this tornado funded account: 0x98B9231de84334c1d48BA0b72CF13f92484924A3
~17k validators… https://t.co/qAlfkVNUW1
— kaden.eth (@0xKaden) October 1, 2026
Ethereum separates withdrawal destinations from addresses that receive transaction fees for producing blocks. Changing the fee address can redirect earnings without changing where customers receive their original stake.
Other large holders continue staking substantial amounts. A September 29 report on Bitmine’s Ethereum holdings said the company held over six million ETH and staked more than five million.
Control over validator signing credentials could also allow conflicting approvals, triggering slashing. Ethereum uses this penalty to remove part of a validator’s stake. Neither MetaMask nor Lido has reported such penalties.
Lido Outlines Reward Losses and Exit Timeline
Lido said MetaMask validators began leaving its pooled staking service early Wednesday. It expects the final validators to stop staking by October 7. That deadline does not mean customers will receive withdrawn ETH immediately.
Removing funds and staking them again could take approximately 45 days because Ethereum has an entry queue. Affected validators would miss earnings during that period. Going offline before completing exits could also bring penalties.
The disruption follows separate changes in Ethereum trading activity. September 30 coverage of Ethereum exchange reserves reported an increase of roughly 125,000 ETH since Friday, alongside slower fund inflows. Lido said stETH holders need not take action. The token represents their share of pooled ETH and accumulated rewards.
Be the first to comment