Why Did MetaMask Make a Sudden Retreat From Ethereum Validators?

MetaMask is taking precautionary steps to protect users following a security incident affecting part of its infrastructure, including the withdrawal of validators operated through its staking service.

In a published update, the crypto wallet provider said it was investigating an ongoing security threat internally while working with external partners and security advisers. MetaMask did not disclose the nature of the incident or identify the infrastructure involved.

The company said, however, that its investigation had not uncovered any immediate threat to MetaMask wallets.

MetaMask Begins Validator Exits

The precautionary measures affect validators operating under MetaMask’s non-custodial staking infrastructure.

MetaMask oversees more than $3 billion worth of staked Ether (ETH) through its staking infrastructure, according to information published on its website, making the service a significant channel for users participating in Ethereum’s proof-of-stake network.

The company has not provided details on the specific security vulnerability of the MetaMask security incident or confirmed whether any user assets were compromised.

MetaMask is continuing to assess the incident with outside security specialists and infrastructure partners. Cointelegraph reported that it contacted the company for additional information but had not received a response at the time of publication.

Lido Confirms MetaMask Validator Withdrawals

Lido separately confirmed that MetaMask Staking had begun exiting Ethereum validators operated through the Lido protocol as part of the precautionary response.

MetaMask Staking is available through MetaMask Portfolio across three staking options: pooled staking, direct validator staking, and liquid staking through Lido and Rocket Pool.

According to Lido developer Will Shannon, the remaining affected validators are expected to complete their exits by October 7.

The ETH associated with those validators will not return to the protocol immediately. Instead, it is expected to be released progressively as validators go through Ethereum’s exit and withdrawal procedures before entering the network again.

Shannon estimated that the full process could take up to 45 days, largely because of the existing queue for new validators entering the Ethereum network.

For now, MetaMask has characterized the validator withdrawals as a precautionary measure while its investigation continues. The company has not disclosed whether the incident affected staking operations beyond the validators being exited or whether any losses occurred.

It is worth noting that Ethereum is also preparing for its next major protocol upgrade, Glamsterdam, which is scheduled to activate on the Sepolia testnet on October 6. The upgrade will introduce changes including enshrined proposer-builder separation, block-level access lists, and revised gas pricing, although no mainnet date has been set yet.