- MetaMask Staking has started exiting its Ethereum validators from Lido following a security incident affecting part of MetaMask’s infrastructure.
- The final validators are expected to complete their exit by October 7, 2026, according to Lido.
MetaMask is responding to a security incident affecting part of its infrastructure, and while the wallet provider has been clear that no immediate threat to user wallets has been identified, the precautionary steps it’s taking are significant enough to pay attention to.
As a direct response to the incident, MetaMask Staking, formerly known as Consensys Staking, has begun exiting its Ethereum validators from the Lido protocol. The exit process is being carried out in coordination with clients, partners, and external security advisors. Lido confirmed the exits began this week, with the final validators expected to complete their exit by October 7, 2026.
The nature of the incident, its cause, and the full scope of affected infrastructure have not been disclosed. In addition, MetaMask has confirmed it is actively remediating the issue internally while working alongside external partners.
What Happens to the ETH?
The Ethereum withdrawn from MetaMask Staking’s validators will not disappear. It will likely return to the Lido protocol gradually as each validator completes the exit, withdrawal, and re-entry cycle. According to Lido Finance developer Will Shannon, that process could take up to 45 days due to an extended entry queue currently affecting the network.
Furthermore, Lido has been clear that no action is required from stETH holders. The protocol’s diverse Node Operator set, combined with its ad hoc reserve fund holding over 6,750 stETH, is designed to absorb and contain exactly this type of disruption without impacting normal protocol operations.
One important clarification MetaMask has made, its staking operations are non-custodial. Moreover, the company does not manage withdrawal keys for staked ETH on behalf of clients. The exit process is a protective measure rather than a fund recovery operation.
The Implication
A security incident at MetaMask’s infrastructure level, even one where no direct wallet threat has been confirmed, carries weight. MetaMask is one of the most widely used Ethereum wallets in the world. Any compromise of its backend infrastructure raises questions about how attackers gained access and what data or systems were exposed.
The validator exit from Lido also means foregone staking rewards and possible downtime penalties if validators are taken offline quickly to reduce network penalty risk, a financial cost the company is absorbing to protect client assets. Also, the investigation is ongoing, and the next update will matter significantly for how the market and the broader Ethereum staking community respond.
Crypto Market Highlights
HSBC RedCoin Takes Shape With Phased Stablecoin Rollout in Hong Kong
Be the first to comment