Cryptocurrency wallet provider MetaMask announced Thursday that it is managing an active infrastructure security incident. The firm is coordinating with external security partners and advisors to resolve the matter, and maintains that MetaMask wallets face no direct risk at this time.
In response to the incident, MetaMask stated: "As a precautionary measure, we are proactively exiting affected validators within our non-custodial staking operations, in coordination with clients and partners. As a reminder, our staking operations are non-custodial in nature and we do not manage withdrawal keys for stake on behalf of our clients."
On the Ethereum network, validators operate as nodes running software that proposes blocks, validates transactions, and secures the blockchain itself.
When asked to clarify which infrastructure components were affected and whether any systems or data had been accessed or compromised, a MetaMask representative declined to elaborate beyond the company's public disclosure.
Lido Finance, the decentralized liquid staking platform, provided additional context the same day, noting that MetaMask Staking (formerly Consensys Staking) has implemented protective actions for client assets tied to Ethereum validators. According to Lido Finance, "These steps include exiting its Ethereum (ETH) validators in the Lido protocol, and will likely incur foregone rewards as well as possible downtime penalties should validators be taken offline in the near future to reduce risks related to potential network penalties."
Lido Finance indicated that "Relevant validators have begun the exit process, with the final validators expected to be exited (but not fully withdrawn) by the end of October 7th, 2026."
MetaMask, a non-custodial wallet developed by blockchain software company Consensys, enables users to store and manage digital assets on the Ethereum network and other compatible blockchains.