MetaMask Exits Lido Validators Amid Security Incident

MetaMask has exited its Lido validators due to an ongoing security incident affecting part of their infrastructure. The company stated that it is proactively exiting affected validators within its non-custodial staking operations as a precaution, and has 'identified no immediate threat to MetaMask wallets.'

The incident occurred within MetaMask's staking business, formerly known as Consensys Staking. The company emphasized that they do not manage withdrawal keys for stake on behalf of clients, which means the operator signs for validators but cannot move the underlying stake.

MetaMask has not disclosed which systems were compromised or how the breach occurred. Lido's governance forum stated that MetaMask Staking had begun exiting its validators in the protocol 'following an investigation into an infrastructure compromise.'

No action is required from stETH holders, according to the disclosure. The cost of exited ETH will fall on rewards instead, which will return to Lido gradually as validators complete the exit, withdrawal and re-entry cycle, estimated to take up to 45 days.