CoinDesk
MetaMask began exiting affected Ethereum validators after a security incident diverted an estimated 0.36 ETH in payments for producing blocks. Security researcher Kaden said 18 of 19 MetaMask-operated validators that earned such payments sent them to an unexpected address. Kaden estimated that roughly 17,000 validators holding 523,000 ETH were being withdrawn; MetaMask has not confirmed those figures. The company said it had identified no immediate threat to MetaMask wallets.
Why it matters
A validator's block-payment destination is separate from the address where its original stake can be withdrawn. Redirecting payments can therefore divert income without redirecting staked ETH. MetaMask has not explained how its systems were compromised, and neither MetaMask nor Lido has reported slashing, the penalty that can destroy part of a validator's stake.
The precautionary exits still carry a cost. Lido said MetaMask-operated validators had begun leaving its staking system. Its stETH token represents users' pooled stake and accumulated rewards, and Lido said stETH holders do not need to take action.
Market impact
Affected validators could miss rewards while out of service and face penalties if taken offline before completing their exits. Lido said withdrawal and re-entry could take up to approximately 45 days because of Ethereum's staking entry queue. The last affected validators are expected to stop staking by Oct. 7, though their ETH may not have been withdrawn by then.
The reported 523,000 ETH exit figure remains a researcher estimate, not a confirmed MetaMask total. The immediate measurable loss is the estimated 0.36 ETH in diverted payments; the broader cost depends on how long validators remain out of service.
Frequently asked questions
-
What was diverted in the MetaMask staking incident?
An estimated 0.36 ETH in payments for producing Ethereum blocks was sent to an unexpected address, according to security researcher Kaden.
-
Were MetaMask users' wallets or staked ETH reported stolen?
MetaMask said it had identified no immediate threat to users' wallets. A validator's block-payment destination is separate from the address where its original stake can be withdrawn.
-
How many Ethereum validators are reportedly exiting?
Kaden estimated that roughly 17,000 validators holding about 523,000 ETH were being withdrawn. MetaMask has not confirmed those figures.
-
Why could the validator exits reduce staking rewards?
Affected validators could miss rewards while out of service. Lido said withdrawal and re-entry could take up to approximately 45 days because of Ethereum's staking entry queue.
-
Do Lido stETH holders need to take action?
No. Lido said stETH holders do not need to take action. Its stETH token represents users' pooled stake and accumulated rewards.
Crypto News
WuBlockchain
CoinTelegraph
CryptoSlate
Lookonchain
TheBlock