MetaMask has begun proactively exiting Ethereum validators from its staking service due to a security incident affecting its infrastructure. The company stated that this is a precautionary measure and that there is no immediate threat to user wallets.
The architecture of the service ensures that the withdrawal keys remain with the clients, meaning that even if the operator's infrastructure is compromised, funds cannot be moved by an attacker. The signing keys, which are used for block validation, are located within the operator's infrastructure.
Lido confirmed that MetaMask Staking is exiting its Ethereum validators from the protocol, with the process expected to conclude by October 7. During this period, validators will stop generating staking rewards, and potential penalties for downtime may occur.
The full cycle of exiting the protocol, retrieving funds, and re-entering staking can take up to 45 days due to the Ethereum network's activation queue. Holders of stETH do not need to take any action, as the funds will eventually return to the protocol.
While the company has not disclosed the specific nature of the incident, it is currently investigating the matter with external security consultants. Meanwhile, on-chain data shows a transfer of 133,298 ETH, worth approximately $356.2 million, from a wallet linked to Consensys CEO Joseph Lubin.
