MetaMask Wallets Safe After Security Incident, but Infrastructure Risks Remain
Consensys founder Joseph Lubin has reassured MetaMask users that their wallets and private keys are safe following a recent security incident. The incident, which was disclosed on September 30, impacted part of MetaMask's infrastructure but did not affect user wallets. Lubin explained that the company uses self-custody, meaning users retain complete control of their funds.
Lubin noted that the company rotated its validator keys, but this process has caused some validators to exit the staking queue and rejoin to stake again. This process can take a lot of time, and validators operated by MetaMask have begun an exit process that finishes on October 7.
The incident has again highlighted the risks to the infrastructure that supports crypto services. MetaMask works with Ethereum validators and other blockchain infrastructure, meaning a compromise can disrupt operations even when customer keys and assets remain outside the attacker's reach.