Now #MetaMask is withdrawing about 523,000 ETH from Ethereum staking, roughly $1.41 million, after an attacker changed the addresses that receive rewards from their validators.
What’s curious is that the attacker would only have managed to divert 0.36 ETH ($970). No staked ETH was stolen, and no wallets were compromised.
The issue is that #MetaMask can’t quickly determine which validators are affected, so it decided to remove the entire set: about 17,000 validators, around 2% of Ethereum’s assets.
Re-staking could take up to 45 days due to entry queues.
With 523,000 $ETH out of staking during that time, approximately 1,700 ETH ($4.6M) would stop being generated as rewards.
A preventive measure that ends up costing thousands of times more than the amount that was diverted.
Even the biggest names in the ecosystem can’t escape the horrors of this little world.
What’s curious is that the attacker would only have managed to divert 0.36 ETH ($970). No staked ETH was stolen, and no wallets were compromised.
The issue is that #MetaMask can’t quickly determine which validators are affected, so it decided to remove the entire set: about 17,000 validators, around 2% of Ethereum’s assets.
Re-staking could take up to 45 days due to entry queues.
With 523,000 $ETH out of staking during that time, approximately 1,700 ETH ($4.6M) would stop being generated as rewards.
A preventive measure that ends up costing thousands of times more than the amount that was diverted.
Even the biggest names in the ecosystem can’t escape the horrors of this little world.
