After a security incident diverted about 0.385 ETH in execution-layer staking rewards, all affected Ethereum validators operated by MetaMask Staking had completed precautionary exits by Nov. 5, MetaMask said.
MetaMask said an attacker gained unauthorized access to infrastructure where reward addresses were stored centrally, then changed the destinations for execution-layer staking rewards. The company said it identified and addressed the incident on Sept. 28.
MetaMask linked some withdrawal delays to the precautionary exits. It said customers may have missed rewards while validators exited or awaited reactivation.
MetaMask said withdrawal keys were held separately from the infrastructure used for reward addresses, a measure it said helped protect customers’ staked principal. It reported no signs that its wallets or users’ private keys had been compromised. It also said it found no indication that anyone accessed customers’ staked principal or withdrew it without authorization. The company said it continues to coordinate with affected customers and partners.
