CryptoSlate
MetaMask is exiting thousands of Ethereum validators after a compromise of part of its infrastructure. Onchain security researcher Kaden said about 17,000 MetaMask-operated validators holding roughly 523,000 ETH were proactively exited after fee rewards from 18 of 19 block-proposing validators were diverted. Kaden estimated the attacker captured about 0.36 ETH; MetaMask has not confirmed those figures or disclosed the cause.
Why it matters
The small reported reward loss is not the main risk. It remains unclear how the attacker changed fee recipients or whether validator signing keys were exposed. Compromised signing keys could be misused in ways that incur slashing penalties. Kaden said 821 potentially affected validators had not yet exited, including three linked to the alleged reward diversion.
MetaMask said it was exiting affected validators as a precaution and had identified no immediate threat to MetaMask wallets. It also said its staking operation is non-custodial and it does not control clients’ withdrawal keys. That separation protects the underlying stake from someone with only validator-level access, but does not resolve the question of possible penalties.
Market impact
About 773,447 ETH was waiting to leave Ethereum’s validator set on Wednesday, according to Validator Queue, the largest exit backlog since December 2025. The queue implied a 13-day, 10-hour wait to exit, followed by an estimated 7.6-day withdrawal sweep delay. Ethereum limits how quickly validators can leave to protect its proof-of-stake consensus, so a burst of exits clears gradually.
The disruption could last longer for MetaMask-linked stake operated through Lido. Lido estimates that exiting, withdrawing and eventually re-entering could take up to 45 days, with Ethereum’s entry queue currently at 27 days. MetaMask has not disclosed how many validators were affected, whether signing keys were exposed or whether any slashing occurred.
Frequently asked questions
-
How much ETH does the researcher say MetaMask exited?
Kaden estimates that about 17,000 MetaMask-operated validators holding roughly 523,000 ETH were proactively exited. MetaMask has not confirmed those figures.
-
What did the attacker allegedly take?
Kaden said fee rewards from 18 of 19 block-proposing validators were diverted and estimated the attacker captured about 0.36 ETH. The extent of the attacker’s access remains unclear.
-
Are MetaMask wallet funds or staked ETH at immediate risk?
MetaMask said it had identified no immediate threat to its wallets. It said it does not control clients’ withdrawal keys, which would prevent someone with only validator-level access from withdrawing the underlying stake.
-
How long could Ethereum validators wait to withdraw?
Validator Queue data implied a 13-day, 10-hour wait to clear the exit queue on Wednesday, followed by an estimated 7.6-day withdrawal sweep delay.
-
Why could MetaMask-linked stake take longer to re-enter Ethereum?
Lido estimates the full exit, withdrawal and re-entry process could take up to 45 days. Returning validators must also pass through an entry queue that was 27 days long.
CoinDesk
WuBlockchain
Crypto News
CoinTelegraph
Lookonchain
WatcherGuru