MetaMask Pulls Validators from Lido Amid Ongoing Security Incident

MetaMask is pulling its Ethereum validators out of the Lido staking protocol as a precautionary measure following an ongoing infrastructure 'security incident' affecting part of its infrastructure. The wallet developer said it has identified no immediate threat to MetaMask wallets, but is addressing and remediating the issue internally alongside external partners and security advisors.

Lido, the largest liquid staking protocol on Ethereum, disclosed the exits in a security notice posted to its governance forum late on Tuesday, describing the cause as an infrastructure compromise under investigation. The move will likely mean foregone rewards for validators, and possibly downtime penalties if they go offline in the coming days to limit the risk of network penalties.

The exited stake should return to the protocol gradually as validators work through the exit, withdrawal, and re-entry cycle, a round trip it put at up to 45 days. Lido said no action is required from holders of stETH, its liquid staking token, and pointed to its spread of node operators and an ad hoc reserve fund of more than 6,750 stETH as buffers against disruption.

Aave founder Stani Kulechov said the lending protocol was watching the situation alongside Lido, and that there had been no impact on Aave markets. Ethena founder Guy Young also commented on the incident, saying that his company's backing assets did not currently include direct exposure to stETH or any other liquid staking token.