MetaMask exits Ethereum validators after attacker diverts staking rewards

MetaMask exits Ethereum validators after attacker diverts staking rewards

Summary

MetaMask halted affected Ethereum validators after a security incident and exited them as a precaution, saying there was no immediate threat to user wallets. Researcher Kaden said 18 of 19 validators diverted about 0.36 ETH in block-production payments to an unexpected address; MetaMask has not confirmed the figures or explained the breach. The exits reportedly involved around 17,000 validators holding 523,000 ETH. No slashing or loss of staked principal has been reported, but validators will miss rewards and may face penalties, while re-entering staking could take up to 45 days. Lido said stETH holders need take no action. Separately, large transfers linked to Joseph Lubin and precautionary withdrawals by Ethena drew attention, though their connection to the incident was unclear.