MetaMask security incident forces Ethereum staking exits, no funds at risk
MetaMask has initiated a precautionary exit of thousands of Ethereum validators following a security incident that diverted a small amount of staking rewards. The company maintains that user funds remain secure and no slashing penalties have been triggered.
Why it matters
This incident underscores the operational risks inherent in centralized staking services and the importance of validator security in the Ethereum ecosystem.
The cryptocurrency wallet provider, which also operates staking services, disclosed Wednesday that the incident affected part of its infrastructure, adding it exited affected validators — or the computers that help check Ethereum transactions — as a precaution.
“At this time, we have identified no immediate threat to MetaMask wallets,” the company said.
Ethereum security researcher Kaden said on X that 18 of 19 MetaMask-operated validators that had earned payments for producing blocks sent those payments to an unexpected address. He estimated about 0.36 ETH had been diverted.
Kaden’s analysis put the precautionary exits at roughly 17,000 validators holding about 523,000 ETH. MetaMask has not confirmed those figures or published an explanation of how its systems were compromised as of Asian afternoon hours Thursday.
Get smarter about the news
Sign up free for a feed built around what you actually care about, Dive Deeper research on any story, and the full text of every article.
Create free accountAlready have an account? Sign in