*Statement: "Security Update: We are responding to a security incident affecting part of our infrastructure. At this time, we have identified no immediate threat to MetaMask wallets. As a precaution, we are proactively exiting affected validators within our non-custodial staking operations, in coordination with clients, partners and security advisors."*$GTC $MOVR $龙虾
- *Scope: NOT wallet extension breach — non-custodial staking infra (ex-Consensys Staking, now MetaMask Staking) running Ethereum validators inside Lido — MetaMask says it does NOT hold withdrawal keys, so staked ETH principal not at risk to attacker withdrawal — but validator operator keys compromised*
- *Actions: Precautionary out-of-order exits of ∼17,000 validators holding ∼523k ETH est by researcher Kaden (unconfirmed by MetaMask) — last exit by Oct 7, then 45-day exit/withdrawal/re-entry queue to restake via Lido — during exit, validators miss rewards + risk offline downtime penalties — Lido says stETH holders no action needed*
- *Unconfirmed diversion: Researcher Kaden analysis of 19 validators: 18 sent block-production payments (MEV/tips) to unexpected address — total ∼0.36 ETH diverted — principal separate destination — no slashing reported yet*
- *Still unknown: Root cause, attack vector, number affected, funds lost — investigation ongoing with external security advisers — users warned ignore phishing DMs asking seed phrase*
*BREAKING 🚨 MetaMask Sep 30 confirms infra security incident — no immediate threat to wallets, no fund impact confirmed — precautionary exit of staking validators from Lido (ex-Consensys Staking) — non-custodial: MetaMask doesn't hold withdrawal keys — exits by Oct 7, restake up to 45 days — researcher est 0.36 ETH block rewards diverted, ∼17K validators / 523K ETH — Lido: stETH holders no action 🚨*#EtherGains70.9%InQ3 #US10YearYieldNears5.3% #DollarIndexHitsHighestSinceMay2025
- *Scope: NOT wallet extension breach — non-custodial staking infra (ex-Consensys Staking, now MetaMask Staking) running Ethereum validators inside Lido — MetaMask says it does NOT hold withdrawal keys, so staked ETH principal not at risk to attacker withdrawal — but validator operator keys compromised*
- *Actions: Precautionary out-of-order exits of ∼17,000 validators holding ∼523k ETH est by researcher Kaden (unconfirmed by MetaMask) — last exit by Oct 7, then 45-day exit/withdrawal/re-entry queue to restake via Lido — during exit, validators miss rewards + risk offline downtime penalties — Lido says stETH holders no action needed*
- *Unconfirmed diversion: Researcher Kaden analysis of 19 validators: 18 sent block-production payments (MEV/tips) to unexpected address — total ∼0.36 ETH diverted — principal separate destination — no slashing reported yet*
- *Still unknown: Root cause, attack vector, number affected, funds lost — investigation ongoing with external security advisers — users warned ignore phishing DMs asking seed phrase*
*BREAKING 🚨 MetaMask Sep 30 confirms infra security incident — no immediate threat to wallets, no fund impact confirmed — precautionary exit of staking validators from Lido (ex-Consensys Staking) — non-custodial: MetaMask doesn't hold withdrawal keys — exits by Oct 7, restake up to 45 days — researcher est 0.36 ETH block rewards diverted, ∼17K validators / 523K ETH — Lido: stETH holders no action 🚨*#EtherGains70.9%InQ3 #US10YearYieldNears5.3% #DollarIndexHitsHighestSinceMay2025
