MetaMask Staking Pulls Lido Validators as Probe Targets Infrastructure Intrusion

Lido said MetaMask Staking (formerly Consensys Staking) is taking precautionary steps to safeguard customer assets tied to the Ethereum validators it operates, after an investigation was launched into an infrastructure intrusion. As part of the response, MetaMask Staking is withdrawing its validators from the Lido protocol. Lido noted this may lead to the loss of some staking rewards and could trigger downtime penalties if certain validators were taken offline recently to reduce the risk of network slashing. According to Lido, the affected validators have already started the exit process, with the final batch expected to complete withdrawal prior to October 7, 2026, though the overall withdrawals will not yet be fully finalized. stETH holders do not need to take any action. Lido expects the ETH withdrawn from MetaMask Staking-operated validators to flow back into the protocol gradually across the exit, withdrawal, and re-entry cycle. Because of extended queue times, the full process could take up to 45 days. Lido reiterated that staking is noncustodial and that MetaMask does not manage customers' withdrawal keys. It added that Lido's diversified set of node operators and additional safeguards, including a temporary reserve of more than 6,750 stETH, are intended to contain and mitigate any disruption to normal protocol operations. The investigation remains ongoing, and Lido said further updates will be provided separately.