ConsenSys founder Joseph Lubin has reassured MetaMask users that user wallets and private keys are completely safe, stating there is no indication that the company's recent cyberattack is affecting the MetaMask system.
The update follows a disclosure by MetaMask on September 30 that part of its infrastructure had been impacted by a security incident. Lubin addressed users on X, emphasizing that Secret Recovery Phrases, keys, and wallet assets were not part of the incident because self-custody ensures users retain complete control over their own keys.
When the breach was first discovered on a Thursday, MetaMask temporarily shut down some Ethereum staking machines operated on behalf of clients, while indicating at the time that there was no immediate threat to customer wallets. Lubin explained that public commentary was limited during the open investigation, with core partners and relevant stakeholders alerted once the issue was fully diagnosed.
As part of the response, the company rotated its validator keys, requiring validators to exit the staking queue and rejoin to stake again. Lido, a major staking protocol, noted that the shutdown protects staked coins but carries a cost. MetaMask-operated validators began leaving the system, with remaining validators expected to stop staking by October 7. While ETH may still be withdrawn, the exit process and subsequent Ethereum entry queue could result in prolonged asset dormancy and missed yields.
MetaMask has warned users to watch for phishing attempts and advised them never to share their Secret Recovery Phrase or private keys with anyone claiming to offer support.
The infrastructure incident follows an earlier security scare for Consensys involving a North Korea-linked software developer using the alias 'Tyler Knapp,' who worked in a consulting role on MetaMask features handling cash-to-crypto bridging between March and April. Consensys severed the developer's backend access upon discovery and confirmed that no funds had been stolen, subsequently notifying federal law enforcement and overhauling contractor background-check protocols.
