MetaMask Halts Ethereum Staking Operations Following Security Breach, User Funds Unaffected

MetaMask has taken its Ethereum staking infrastructure offline following a security breach, as Lido flagged potential reward losses and a researcher revealed that block production payments were redirected to an unauthorized wallet.

The wallet operator, which also manages staking services, disclosed Wednesday that the breach compromised part of its infrastructure. As a precaution, it removed affected validators—the machines that verify Ethereum transactions—from the network.

“At this time, we have identified no immediate threat to MetaMask wallets,” the company stated.

Security researcher Kaden reported on X that 18 of 19 MetaMask-run validators had redirected block production payments to an unfamiliar address, amounting to roughly 0.36 ETH.

Kaden’s analysis estimated the precautionary withdrawals involved roughly 17,000 validators controlling about 523,000 ETH. MetaMask has neither confirmed those numbers nor explained how its systems were breached as of Thursday afternoon in Asia.

Staking allows holders to earn ETH by committing coins to help secure the Ethereum network. Operators like MetaMask run the validating infrastructure, while customers maintain separate control over withdrawal destinations for their staked assets.

Source link