MetaMask Halts Ethereum Staking After Security Incident

Incident Overview

MetaMask announced the suspension of its Ethereum staking services after a security incident that impacted part of its infrastructure. Although the company stated that there is no immediate risk to MetaMask wallets, it has exited affected validators as a precaution.

Details of the Diversion

According to Ethereum security researcher Kaden, 18 out of 19 validators operated by MetaMask diverted payments from block production to an unexpected wallet, totaling around 0.36 ETH. His analysis estimates that approximately 17,000 validators holding around 523,000 ETH have exited staking.

Potential Implications for Validators

The shutdown of these validators may result in missed rewards and potential penalties if they are not properly managed before final exits. Lido, which facilitates pooled ETH staking, noted that the last of these validators are expected to cease staking by October 7, although their ETH may not be withdrawn by that time. Re-staking could take up to 45 days due to Ethereum's queue system.

No Required Action for stETH Holders

Lido has reassured stETH holders that no action is necessary on their part, as their staked assets and accumulated rewards remain secure despite the operational changes. The situation is evolving, and further details from MetaMask regarding the breach are awaited.

Related Movements in the Market

In light of the incident, there were notable movements in large wallets, including a transfer of 133,298 ETH (approximately $356 million) linked to Ethereum co-founder Joseph Lubin. Additionally, Ethena, which manages the USDe stablecoin, made precautionary withdrawals from the Morpho lending platform but has since redeployed the funds after assessing the situation.