MetaMask Discloses Infrastructure Security Incident and Begins Terminating Ethereum Validators
Cryptocurrency wallet provider MetaMask disclosed an ongoing infrastructure security incident on Thursday, saying it is working with external partners and security advisers to resolve the issue.
MetaMask said there is currently “no imminent threat to the MetaMask wallet,” but added that it is taking precautionary measures involving its non-custodial staking operations.
“As a precautionary measure, we are working with our clients and partners to proactively terminate affected validators in our non-custodial staking operations,” MetaMask said. “As a reminder, our staking operations are non-custodial in nature and we do not manage stake withdrawal keys on behalf of our clients.”
MetaMask takes precautions with affected validators
Validators are nodes on the Ethereum network that run software responsible for proposing blocks, validating cryptographic transactions, and maintaining the security of the Ethereum blockchain.
MetaMask did not provide details about which infrastructure components were affected or whether any systems or data were accessed or compromised. A company spokesperson directed BleepingComputer to MetaMask’s official statement when asked for additional information.
Decentralized liquid staking platform Lido Finance separately announced that MetaMask Staking, formerly Consensys Staking, had taken precautions to protect customer assets associated with Ethereum validators.
“These steps include the termination of Ethereum (ETH) validators on the Lido protocol to reduce risks associated with potential network penalties, which could result in lost rewards as well as downtime penalties if validators go offline in the near future,” Lido Finance said.
According to Lido, the relevant validators have begun the termination process. The final validator is expected to be terminated, but not fully withdrawn, by the end of October 7, 2026.
MetaMask wallet remains separate from staking operations
Developed by blockchain software company Consensys, the MetaMask non-custodial cryptocurrency wallet allows users to store and manage assets on the Ethereum network and other compatible blockchains.
MetaMask has not disclosed further details about the infrastructure security incident or indicated that the wallet itself is under an imminent threat.
Join Mikko Hypponen and security leaders from the NFL, Chanel, and Atlassian for a 2-hour digital summit about what will change with AI speed attacks, what defenders should stop doing, and how to verify, decide, correct, and revalidate at machine speed.
Source: www.bleepingcomputer.com