MetaMask disclosed an ongoing security incident impacting part of its infrastructure. The company said it is actively remediating the issue with external partners and security advisors, and that it has identified no immediate threat to MetaMask wallets. Additional details about the incident were not disclosed.
As a precautionary measure, MetaMask is proactively exiting affected validators within its non-custodial staking operations, coordinating with clients and partners. It reiterated that its staking operations are non-custodial and that it does not manage withdrawal keys for client stake.
Lido, a decentralized liquid staking solution, confirmed that MetaMask is exiting its Ethereum validators in the Lido protocol. Lido noted that these steps may incur foregone rewards and possible downtime penalties if validators are taken offline soon to reduce network penalty risks. The exit process has begun, with the final validators expected to be exited by October 7, 2026, though not fully withdrawn.