MetaMask Exits Lido Validators Over Security Incident Risks
MetaMask has withdrawn its Ethereum validators from Lido protocol due to an infrastructure security incident. The move is a precautionary measure, and both companies stress that there's no immediate threat to users' wallets.
Lido disclosed the exits in a security advisory on its governance forum, citing an infrastructure compromise under investigation. MetaMask Staking (formerly Consensys Staking) operates validators within Lido, Ethereum's largest liquid staking protocol.
The withdrawn ETH could take up to 45 days to rejoin the protocol due to Ethereum's extended exit queue. According to an independent onchain analysis by researcher Kaden, 18 of 19 affected MetaMask validators directed rewards to an address linked to the Tornado Cash mixer instead of the correct recipient.
Lido indicated that holders of stETH, its liquid staking token, do not need to take any action. The protocol also pointed to its node operator distribution and an ad hoc reserve fund of over 6,750 stETH as buffers against potential disruptions.