Loading prices…
🩸BEARISH

MetaMask Staking Incident Triggers Exit of 17,000 Validators

The reported diversion of block rewards was small, but potentially compromised signing keys leave a separate slashing risk for validators still active.

About 17,000 validators representing roughly 523,000 ETH have been exited following a security incident affecting MetaMask staking, on-chain researcher Kaden said. Around 821 potentially affected validators remain active.

Why it matters

Kaden identified 18 block rewards diverted from their intended fee recipients to an address funded through Tornado Cash. The attacker received about 0.36 ETH. MetaMask said its staking service is non-custodial and that it does not control users’ withdrawal keys.

That distinction does not eliminate validator risk. Kaden said compromised signing keys could still expose affected validators to slashing.

Market impact

The reported ETH diverted is small relative to the amount represented by exited validators. The immediate question for stakers is whether the potentially affected validators still active can be secured or exited before any slashing occurs.

Related tokens
$ETH

Frequently asked questions

  1. How much ETH was represented by the exited validators?

    On-chain researcher Kaden said about 17,000 exited validators represented roughly 523,000 ETH.

  2. How many potentially affected validators remain active?

    Kaden said around 821 potentially affected validators were still active.

  3. What did the attacker receive from the diverted rewards?

    Kaden identified 18 diverted block rewards that netted the attacker about 0.36 ETH.

  4. Does MetaMask control stakers’ withdrawal keys?

    MetaMask said its staking service is non-custodial and that it does not control users’ withdrawal keys.

  5. Why is there a slashing risk despite the validator exits?

    Kaden warned that compromised validator signing keys could still pose a slashing risk. Around 821 potentially affected validators remained active.

Source attribution
Aggregated from WuBlockchain · Verified · Last refreshed 4h ago
Open original →