MetaMask disclosed a base infrastructure security incident on September 30 and took preventive measures, starting to wind down its non-custodial staking business (MetaMask Staking, formerly Consensys Staking) that operates Ethereum validators on the Lido protocol. The company said it has not found any direct threats to MetaMask wallets at present. This staking uses a non-custodial architecture; the platform does not hold users’ withdrawal keys. Validator daily signing and withdrawal destinations are handled by different credentials. The Lido research forum also clarified at the same time: $stETH holders do not need to take any further action.

In terms of the process, the relevant validators have already initiated their exit. The final batch is expected to complete the exit by October 7, 2026 (at which point not all withdrawals will yet be completed). Because Ethereum has a long queue, the full cycle of exit, withdrawal, and re-entry could last up to about 45 days. During this period, users may miss rewards. If validators are taken offline early to reduce the risk of network penalties, they may also incur slashing penalties. On-chain research estimates that around 17,000 validators—totaling about 523,000 $ETH —are in the exit queue, and that about 0.36 ETH in block production rewards were previously directed to an abnormal address. MetaMask has not yet publicly confirmed the above scale and the intrusion path. The investigation is ongoing, and users are reminded to watch for potential phishing risks going forward.

#ETH #MetaMask #质押 does not constitute investment advice