MetaMask Starts Withdrawing Staking Validators After Infrastructure Security Incident

MetaMask has begun initiating the exit of Ethereum validators tied to its noncustodial staking service after disclosing an infrastructure security incident on Sept. 30, according to CoinDesk. Lido said it expects the final batch of affected MetaMask-operated validators within the protocol to reach the exited state by Oct. 7, depending on network conditions. MetaMask said it is responding to an ongoing incident affecting part of its infrastructure and is working with external partners and security advisors. The company said it has identified "no immediate threat to MetaMask wallets," but did not provide technical details on the systems involved. It also said it does not hold customers' withdrawal keys, meaning validator operators do not control the keys used to withdraw underlying staking funds. As of Oct. 1, public disclosures had not specified an attack method, how many validators were affected, the amount of ETH involved, or whether any data was accessed. MetaMask said it will continue monitoring the situation and share updates as the investigation progresses, emphasizing that the affected infrastructure is separate from its wallet product. The company confirmed no compromise of MetaMask wallets and reported no losses involving wallet users. The impacted service relates to MetaMask Staking, previously known as Consensys Staking. Earlier in September, Consensys Software Inc. said it plans to operate under the MetaMask brand and spin off its protocol and institutional infrastructure business into a newly formed Consensys company, with the corporate separation expected to be completed by the end of 2026. MetaMask's validator staking offering uses a noncustodial model. Support documentation says users retain control over staking and rewards while MetaMask's infrastructure runs validator operations. For direct validator staking, ETH remains locked in Ethereum's staking system until the user initiates a withdrawal. MetaMask has not clarified whether its entire staking operation is affected or which specific infrastructure components were involved. Lido provided an operational update following MetaMask's disclosure, stating on its governance forum on Sept. 30 that MetaMask Staking took precautionary action after an "infrastructure compromise." Validators operated by MetaMask Staking within Lido have started exiting. Lido expects the last affected validators to complete the exit phase by the end of Oct. 7, though they may not have fully withdrawn by then. Lido noted that Ethereum validator withdrawals occur in multiple stages, and ETH exiting MetaMask-operated validators will gradually return to the protocol as each validator completes exit, withdrawal, and eventual reentry. With Ethereum's validator entry queue, the full cycle could take about 45 days. Lido told users that "stETH holders need take no action." The protocol warned that the exit process may reduce staking rewards. If validators go offline before exiting is complete, they may incur downtime penalties. Lido said it has not indicated any slashing, framing the potential penalties as risks tied to a precautionary response rather than confirmed losses. It added that its decentralized node-operator structure and a temporary reserve fund holding more than 6,750 stETH are designed to help absorb operational disruptions. Lido currently reports more than 600 operators in its staking module. In July, it launched Validator Infrastructure Upgrade (Curated Module v2), adding support for higher effective validator balances and new mechanisms for operator accountability and slashing. MetaMask reiterated the separation between operating validators and controlling assets: its service signs validator duties and maintains infrastructure, while users retain withdrawal control. Its documentation characterizes validator staking as selfcustodial, with users depositing ETH into Ethereum's beacon deposit contract and keeping control of withdrawals. Lido follows a similar split of responsibilities, stating that withdrawal credentials are set by the protocol while node operators generate signing keys to perform validator duties. MetaMask has not said whether validator signing keys were accessed during the incident and has not disclosed any evidence of slashing, stolen customer staking funds, or unauthorized withdrawals. Market participants also weighed in. Aave said its markets operated normally during the investigation. Founder Stani Kulechov said on Oct. 1 that Aave was unaffected and protocol functions were running as usual, noting he was monitoring developments involving MetaMask Staking and Lido after validator exit messages became public. The comment is notable because stETH and other liquid staking assets are widely used across DeFi, including lending markets. MetaMask has not provided a timeline for completing its security investigation. Lido's timeline indicates affected validators are expected to reach the exited state by the end of Oct. 7, with withdrawals and reentry continuing afterward as part of a process that could take roughly 45 days. MetaMask said remediation is underway with external security advisors and that it remains in contact with customers and partners, while Lido said a comprehensive investigation is ongoing and additional updates will follow.