MetaMask Says Security Incident Is Affecting Part of Its…

AI summary of the source article

MetaMask disclosed an ongoing security incident affecting part of its infrastructure on September 30, prompting the precautionary exit of affected Ethereum validators from its non-custodial staking operations. Lido confirmed that MetaMask Staking began exiting validators operated for the protocol, a process expected to conclude exits by October 7, though full cycle completion could take up to roughly 45 days. The company emphasized that its staking service does not manage withdrawal keys, limiting the ability to withdraw underlying ETH. Furthermore, MetaMask has identified no immediate threat to self-custodial wallets, reporting no compromise of seed phrases, private keys, or customer funds.

Why it matters

The incident and containment actions are concentrated on MetaMask's staking infrastructure rather than its self-custodial wallet, with no reported compromise of user private keys or underlying funds.

Key facts

• MetaMask is exiting affected Ethereum validators from its staking operations as a precaution following a September 30 security incident.
• Lido confirmed the validator exits are expected to complete by October 7, with the full exit and re-entry process potentially taking up to 45 days.
• MetaMask identified no immediate threat to wallet users and reported no compromise of private keys, seed phrases, or customer funds.