MetaMask Exits Lido Validators Amid Infrastructure Compromise

MetaMask has announced that it is exiting its Ethereum validators in the Lido protocol as a precautionary measure due to an infrastructure compromise. The incident occurred on September 30, and MetaMask stated that it is actively addressing and remediating the issue internally, in coordination with external partners and security advisors.

The company emphasized that there is no indication that MetaMask wallets or customer funds have been affected, and that the staking operations are non-custodial, meaning that MetaMask does not manage withdrawal keys for client stake.

The exit process is expected to take around 45 days, during which the validators will complete their exit, withdrawal, and re-entry cycle. Lido confirmed the move in a governance-forum disclosure, stating that the final validators are expected to be exited by the end of October 7.

StETH holders do not need to take any immediate action, but may face some downtime penalties if validators are taken offline to reduce network-penalty risk. The incident highlights the importance of tight security measures in decentralized finance.