MetaMask Exits Ethereum Validators Amid Security Incident
MetaMask is exiting its Ethereum validators after a security incident was flagged on September 30, 2026. The company is working with outside partners and security advisers to understand the cause of the problem. According to Lido, the staking protocol hosting the affected validators, the last of the validators are expected to complete their exit by October 7, 2026.
The security incident is being treated as a precautionary measure, and MetaMask has stated that there is no immediate threat to its wallets. The company's staking operation is non-custodial, meaning it does not hold the withdrawal keys tied to client stake, so it cannot move the underlying ETH on a client's behalf.
Lido estimates that the complete exit-withdrawal-re-entry cycle could take up to 45 days, driven largely by Ethereum's extended validator entry queue. Affected validators may forfeit staking rewards while out of service, and if operators take validators offline before the exit process formally completes, those validators could face downtime penalties.