#metamask安全事件后撤出lido验证节点
Many people see it as “the wallet has gone wrong,” but what may truly be worth looking at isn’t the wallet—it’s the staking chain behind it..
📢 盘面异动群里说
MetaMask is responding to a “ongoing infrastructure security incident.” As a precaution, it is withdrawing batches of the Ethereum validators it operates in Lido.. The official line is that no direct threat to wallets was found; staking is non-custodial, and the withdrawal keys are not in MetaMask’s hands.. Lido says stETH holders don’t need to do anything, but if you want to truly get the ETH back, you have to complete the entire process—exiting, withdrawing, and then going through it again. The maximum time could be up to 45 days..
The numbers are more durable than the conclusion.. On-chain analysis (neither side has confirmed) estimates that this preventative exit involved about 17,000 validators, or roughly 523,000 ETH—about $1.4 billion at current prices.. Meanwhile, researcher Kaden calculated the actual loss: 19 validators received block rewards, of which 18 entries were sent to an address funded by Tornado Cash, totaling about 0.36 ETH—less than $1,000..
In other words: using liquidity in the tens of billions of dollars to plug a hole worth under $1,000.. This isn’t overreaction—it’s treating “the operations layer being touched” as the highest-level signal. If they could change the fee-receiving address, it means someone has already gotten into the signing or configuration layer; what will be changed next, no one can guarantee..
Put into a bigger chain of events: stETH is one of the most widely used collateral assets on Aave. Aave’s founder says the market hasn’t been affected for now, and Ethena is also watching.. But what these kinds of incidents genuinely shake isn’t the price—it’s the accounting of how much of the staking yield is compensation for operational risk. If funds start re-pricing, the stETH premium, the leverage for re-staking, and the discount rates of DeFi collateral all have to be re-questioned..
Next, two points are worth watching: whether those “possibly affected” validators will be proactively slashed, and whether stETH liquidity will get tight during the 45-day exit window.. The reversal may be here: if it ultimately turns out to be just an operational mishap with no real losses, the market will probably forget in about three days—but the value of those three words, “non-custodial,” has already been re-priced.
Many people see it as “the wallet has gone wrong,” but what may truly be worth looking at isn’t the wallet—it’s the staking chain behind it..
📢 盘面异动群里说
MetaMask is responding to a “ongoing infrastructure security incident.” As a precaution, it is withdrawing batches of the Ethereum validators it operates in Lido.. The official line is that no direct threat to wallets was found; staking is non-custodial, and the withdrawal keys are not in MetaMask’s hands.. Lido says stETH holders don’t need to do anything, but if you want to truly get the ETH back, you have to complete the entire process—exiting, withdrawing, and then going through it again. The maximum time could be up to 45 days..
The numbers are more durable than the conclusion.. On-chain analysis (neither side has confirmed) estimates that this preventative exit involved about 17,000 validators, or roughly 523,000 ETH—about $1.4 billion at current prices.. Meanwhile, researcher Kaden calculated the actual loss: 19 validators received block rewards, of which 18 entries were sent to an address funded by Tornado Cash, totaling about 0.36 ETH—less than $1,000..
In other words: using liquidity in the tens of billions of dollars to plug a hole worth under $1,000.. This isn’t overreaction—it’s treating “the operations layer being touched” as the highest-level signal. If they could change the fee-receiving address, it means someone has already gotten into the signing or configuration layer; what will be changed next, no one can guarantee..
Put into a bigger chain of events: stETH is one of the most widely used collateral assets on Aave. Aave’s founder says the market hasn’t been affected for now, and Ethena is also watching.. But what these kinds of incidents genuinely shake isn’t the price—it’s the accounting of how much of the staking yield is compensation for operational risk. If funds start re-pricing, the stETH premium, the leverage for re-staking, and the discount rates of DeFi collateral all have to be re-questioned..
Next, two points are worth watching: whether those “possibly affected” validators will be proactively slashed, and whether stETH liquidity will get tight during the 45-day exit window.. The reversal may be here: if it ultimately turns out to be just an operational mishap with no real losses, the market will probably forget in about three days—but the value of those three words, “non-custodial,” has already been re-priced.
