MetaMask responds to security incident, exits Ethereum validators as precaution

Cryptocurrency wallet provider MetaMask disclosed Thursday that it is responding to an ongoing security incident affecting part of its infrastructure, saying there is no immediate threat to MetaMask wallets.

MetaMask, developed by blockchain software company Consensys, said it is actively addressing and remediating the issue internally in coordination with external partners and security advisors. The company has not disclosed what part of its infrastructure was affected or whether any systems or data were accessed or compromised; when asked, a MetaMask spokesperson redirected questions to the company’s public statement.

As a precautionary measure, MetaMask said it is proactively exiting affected validators within its non-custodial staking operations, in coordination with clients and partners. The company noted that its staking operations are non-custodial and that it does not manage withdrawal keys for stake on behalf of its clients. Validators are nodes on the Ethereum network that run software responsible for proposing blocks, verifying transactions and maintaining the blockchain’s security.

Lido Finance, a decentralized liquid staking platform, said MetaMask Staking, formerly known as Consensys Staking, has taken precautionary measures to protect client assets tied to the Ethereum validators it operates. Lido said the steps include exiting MetaMask’s Ethereum validators from the Lido protocol, which will likely result in foregone staking rewards and could incur downtime penalties if validators are taken offline to reduce exposure to potential network penalties. Lido said the relevant validators have begun the exit process, with the final ones expected to be exited, though not fully withdrawn, by the end of Oct. 7, 2026.

MetaMask is a non-custodial crypto wallet that lets users store and manage assets on the Ethereum network and other compatible blockchains.