MetaMask Exits Lido Ethereum Validators After Security Incident
MetaMask has started removing Ethereum validators from the Lido staking protocol after discovering an ongoing security issue affecting part of its infrastructure.
The wallet provider said Tuesday that it had found no immediate threat to user wallets. It is investigating and fixing the problem with outside security experts and partners while taking precautionary steps across its non-custodial staking operations.
MetaMask Staking, formerly known as Consensys Staking, operates Ethereum validators through Lido, the network's largest liquid staking protocol. Lido confirmed that the affected validators are being exited following an infrastructure compromise that remains under investigation.
The validator exits could result in lost staking rewards and possible penalties if some validators go offline during the process. Lido said the affected validators have already begun exiting, with the final group expected to complete the exit process by October 7, although they will not have fully withdrawn their ETH by that date.
Recovering the staked ETH will take significantly longer. Lido said the assets must move through Ethereum's exit and withdrawal process before they can potentially be staked again. Because of the current validator entry queue, the full process could take as long as 45 days.
Both MetaMask and Lido stressed that the staking arrangement is non-custodial. MetaMask does not hold the withdrawal keys for customer funds, reducing the risk of directly losing the underlying staked ETH.
Lido also said stETH holders do not need to take any action. The protocol pointed to its distributed network of node operators and an emergency reserve of more than 6,750 stETH as additional safeguards against disruption.
Independent blockchain research has offered some early details, although neither company has confirmed the findings. Researcher Kaden reported that 19 MetaMask validators had earned block rewards, with payments from 18 of them sent to an address that had previously received funds through Tornado Cash. The amount identified was around 0.36 ETH, worth less than $1,000 at current prices.
The same analysis suggested that roughly 17,000 validators holding about 523,000 ETH, valued at approximately $1.4 billion, were being exited as a precaution. Around 821 potentially affected validators had reportedly not yet completed the process.
The researcher said it remains unclear whether the incident could allow an attacker to change fee recipients across the wider validator group. The analysis also indicated that the attacker likely did not have access to the withdrawal keys needed to take the staked ETH, although compromised signing access could potentially create a risk of deliberate validator penalties.
Other protocols with exposure to staked ETH are monitoring the situation. Aave founder Stani Kulechov said the lending platform had seen no impact on its markets, where stETH is widely used as collateral. Ethena founder Guy Young also said its USDe reserves did not have direct exposure to stETH or other liquid staking tokens and expected no effect.
The incident follows another security-related validator exit involving a major Lido operator. Kiln withdrew its Ethereum validators in September 2025 after identifying a potential infrastructure compromise.
MetaMask and Lido have not disclosed what part of the infrastructure was compromised, how the breach occurred or who may be responsible. Both companies said investigations are continuing and further updates will follow.