MetaMask Disconnects Affected Validators Amid Security Incident

MetaMask has begun to disconnect affected Ethereum validators from its non-custodial staking operations after discovering an ongoing security incident in part of its infrastructure. The company says client withdrawal keys are outside its control, but this distinction does not make the transition instantaneous.

The disclosure identifies an exit, not a wallet breach, and MetaMask has started taking affected validators offline in coordination with clients and partners.

Client $ETH can move from the consensus layer to the withdrawal address controlled by the client and later be deposited with another operator. Without the withdrawal credentials and client instructions, no observer can say that these funds are going to an exchange.