MetaMask Staking Incident Triggers Exit of 17,000 Validators
The reported diversion of block rewards was small, but potentially compromised signing keys leave a separate slashing risk for validators still active.
Every Zipp story tagged #ValidatorSecurity, newest first.
The reported diversion of block rewards was small, but potentially compromised signing keys leave a separate slashing risk for validators still active.
The reported diversion is small, but affected validators could miss staking income for weeks while they exit and re-enter Ethereum's staking system.
The precautionary move puts staking infrastructure risk in focus as MetaMask Staking works to protect client assets.
The precaution affects non-custodial staking operations; MetaMask says it does not hold clients' withdrawal keys.
The agents surfaced a remotely triggerable gossipsub flaw now patched as CVE-2026-34219, but most of the engineering effort went into rejecting the convincing, well-written bugs that weren't real.