MetaMask Security Breach Triggers Validator Exits and Lido Deadline

MetaMask, a popular Ethereum wallet and staking service, has recently experienced a security breach affecting its noncustodial staking infrastructure. On September 30, the company announced that it was working with external security experts to address the issue, stating that it had not found any evidence of immediate risks to MetaMask wallets. As a precautionary measure, MetaMask has begun removing Ethereum validators from its staking service, including those participating in the Lido protocol. The protocol, which provides a decentralized staking service, has set an October 7 deadline for the last of the relevant validators to exit the state. This process may take around 45 days due to waitlists for becoming an Ethereum validator, and may result in missed staking rewards and downtime penalties for validators who do not complete their exits on time. The incident has also sparked concerns in the decentralized finance sector, with Stani Kulechov, founder of Aave, stating that Aave markets are running normally and unaffected by the MetaMask Staking incident. MetaMask has not released information about how the hack was carried out, which infrastructure was attacked, or how many validators and ETH were targeted. The company has stated that it is investigating the event and plans to release updates as needed.