MetaMask Faces Security Incident, Exits Lido Validators
Written with artificial intelligence.
MetaMask has reported a security incident affecting part of its infrastructure, prompting the urgent withdrawal of its Ethereum validators from Lido. Users are assured that their funds remain safe, but they should exercise caution against potential scams.
Security Incident Announcement
In the early hours of October 1, MetaMask, the prominent Ethereum wallet, disclosed a security incident impacting part of its infrastructure. Although details regarding the nature and extent of the breach are not provided, MetaMask has proactively removed its validators from Lido as a precautionary measure.
User Safety Assurance
MetaMask assures users that their funds are not at immediate risk. However, the company warns users to remain vigilant as security incidents often attract scams targeting affected platforms. Users are advised to be cautious with any requests for wallet access or signature approvals.
Validator Withdrawal Process
The withdrawal of validators from Lido is already underway. The last validators are expected to exit by October 7, 2026. For holders of stETH, no action is required on their part, but users should be aware that the release of ETH could take up to 45 days due to validator entry queues. This withdrawal may also lead to lost rewards and potential penalties for unavailability.
Precautions to Take
While MetaMask has not yet provided a detailed post-mortem of the incident, users are advised to follow certain precautions:
- Read all signature requests thoroughly.
- Delay large swaps or new token approvals for a few days.
- Ignore unsolicited communications claiming to be MetaMask support.
MetaMask has previously warned users about risks such as address poisoning, highlighting the importance of user vigilance in maintaining security.