MetaMask: infrastructure incident; staking validators exiting Lido
30 Sep 2026: MetaMask said it is responding to a security incident affecting part of its infrastructure. The company stated it has identified no immediate threat to MetaMask wallets.
As a precaution it is exiting affected validators in its non-custodial staking operations and says it does not manage withdrawal keys for client stake.
Lido said MetaMask Staking began out-of-order exits of those Ethereum validators the same day, with the last affected exits expected by the end of 7 Oct; the full exit, withdrawal, and re-entry cycle may take about 45 days.
stETH holders need no action; expect possible foregone rewards and downtime penalties. MetaMask’s Oct 1 update says there is no indication wallets or customer funds were affected.
36 ETH in diverted proposal fees; MetaMask has not confirmed those figures. Root cause still undisclosed. Pulse users who keep MetaMask for PulseChain should treat unsolicited “update MetaMask” emails and DMs as phishing.
Research snapshot from MetaMask’s user update, Lido’s security disclosure, and related press.
Update
Oct 1 MetaMask follow-up; Grok Mode B primaries locked
01 Oct Grok window matched the live card and added official primaries.
MetaMask’s Oct 1 user-update says investigation continues and, based on work to date, there is no indication MetaMask wallets or customer funds have been affected.
Lido’s disclosure frames out-of-order exits with last affected validators expected exited by end of 7 Oct and up to about 45 days for exit, withdrawal, and re-entry. Root cause still undisclosed.
Same phishing hygiene: MetaMask will never ask for your Secret Recovery Phrase.
Update
Researcher scale on exits; MetaMask still unconfirmed
36 ETH in diverted proposal fees on a sample of MetaMask-operated proposers. MetaMask has not confirmed validator count or ETH amount.
Official Oct 1 line still holds: no indication wallets or customer funds affected. Root cause and which systems were reached remain unpublished.
369 take
This is a wallet-vendor infrastructure story with staking exits in motion.
MetaMask’s official line is no wallets or customer funds indicated affected; researcher scale numbers are still unconfirmed by MetaMask.
Pulse lesson: ignore “mandatory MetaMask update” links; prefer store updates you start yourself; keep long-hold bags on keys MetaMask never holds.
Sources