MetaMask said on Thursday it is responding to an “ongoing security incident” affecting part of its infrastructure, and that it is working with external partners and security advisors to remediate it. The wallet maker said it has identified no immediate threat to MetaMask wallets, and has not disclosed what was affected, how the problem was found, or whether anyone exploited it.
As a precaution, MetaMask is proactively exiting the affected validators in its non-custodial Ethereum staking operation. It stresses that it does not hold withdrawal keys for clients’ stake. Lido, the liquid staking protocol whose validators MetaMask operates, said the exits will probably cost foregone rewards and possibly downtime penalties, and that the final validators should be exited, though not yet fully withdrawn, by the end of October 7, 2026. This is a developing story and details may change as MetaMask and Lido publish more.
How to check if you’re affected
Affected products are MetaMask staking services and Ethereum stake delegated through MetaMask-operated validators in the Lido protocol. MetaMask says ordinary MetaMask wallets are not under immediate threat, but treat that as current information, not a guarantee.
- If you staked through MetaMask, watch the official MetaMask update page and the Lido research forum post for instructions on withdrawals and expected reward impact.
- Expect temporary missed rewards, and do not follow “recovery” links in emails, DMs or ads; scammers usually move quickly during incidents like this.
- Wallet users: keep your app updated, never share your recovery phrase, and review your connected sites and token approvals.