MetaMask Exits Lido Validators Amid Security Incident
MetaMask has announced that it is exiting Ethereum validators run by its staking business as a precautionary measure due to an ongoing security incident affecting part of its infrastructure. The company stated that it has identified no immediate threat to MetaMask wallets and emphasized that users do not need to take any action.
The incident occurred in the non-custodial staking operations, formerly known as Consensys Staking, within MetaMask's validator business. As a precaution, the company is proactively exiting affected validators and remediating the issue internally with external partners and security advisors.
META MASK explained that it does not manage withdrawal keys for stake on behalf of clients, which means the operator signs for validators but cannot move the underlying stake. The exits are concentrated in Lido, a protocol that allows users to earn rewards by staking their Ethereum (ETH) tokens.
Lido's governance forum revealed that MetaMask Staking had begun exiting its validators following an investigation into an infrastructure compromise. The final validators are expected to be exited, though not fully withdrawn, by the end of October 7.