MetaMask Exits Ethereum Validators Following Security Incident

MetaMask, a popular crypto wallet, has begun exiting Ethereum validators following a security incident disclosed on September 30, 2026. The incident led to a precautionary measure to protect user funds, which resulted in the exit of approximately 17,000 validators holding around 523,000 ETH. The staked ETH will not be immediately released, as validators must complete their exit before the network processes their withdrawals.

Lido, the protocol responsible for managing the staked ETH, expects the final affected validators to stop staking by October 7. However, the withdrawal and return of funds to staking may take around 45 days, during which time the affected validators will miss rewards and may incur downtime penalties.

According to Lido, no action is required from stETH holders, as the token represents pooled ETH deposits and accumulated staking rewards. The validator exits do not require holders to withdraw or exchange their tokens, and the affected ETH will return to staking after the withdrawal process finishes.

MetaMask has stated that it is investigating the incident with external partners and security advisers, and has identified no immediate threat to MetaMask wallets. The company's statement did not explain how the affected infrastructure was compromised.