MetaMask Exits Validators Amid Ongoing Security Incident

MetaMask has announced that it is exiting validators as a precautionary measure due to an ongoing security incident in its infrastructure. The company stated that client withdrawal keys are outside its control, but emphasized that this distinction does not make the transition instantaneous.

The incident involves MetaMask's non-custodial staking operations, where clients supply stake while a provider operates validator nodes. However, MetaMask does not manage withdrawal keys for client stake, which provides some protection against direct diversion of principal through a changed withdrawal destination.

MetaMask has not disclosed the affected key set, relevant client withdrawal credentials, or whether any validator was slashed or missed duties. The company's statement only confirms that precautionary exits are underway and the amount of ETH involved is unknown.