MetaMask Exits Ethereum Validators After Infrastructure Security Incident

MetaMask has taken precautionary steps to protect client assets after an infrastructure security incident affected its non-custodial staking operations. The company is exiting affected Ethereum validators operated through Lido, with the final exit expected by October 7, 2026. This process could take up to approximately 45 days.

MetaMask has found no immediate threat to its wallets and claims it does not manage clients' withdrawal keys, which means it cannot move underlying stake on their behalf. The affected validators may forgo rewards, and taking them offline before they complete the exit could incur downtime penalties.

Lido said no action is required from stETH holders, but the exit can still have consequences. The company has a diverse node-operator set and security systems in place to contain disruptions, including an ad hoc reserve fund holding more than 6,750 stETH.