MetaMask has confirmed a security incident affecting part of its infrastructure and is taking precautionary steps to protect client assets, though it says user wallets face no immediate threat.
The cryptocurrency wallet provider is working with external security advisers and partners to contain and resolve the issue. As a precaution, MetaMask is exiting affected validators linked to its non-custodial staking operations. The company emphasized that it does not control withdrawal keys for client stakes, meaning customer assets remain under the control of the respective clients.
Lido separately confirmed the infrastructure compromise and stated it is taking precautionary measures related to its operated Ethereum validators. The company is exiting its Ethereum validators in the Lido protocol, which will likely result in foregone rewards and possible downtime penalties. Relevant validators have begun the exit process, with the final validators expected to be exited by the end of October 7th, 2026.
The announcement coincided with a large transfer of Ethereum from a wallet linked to Ethereum co-founder Joseph Lubin. Blockchain tracker Lookonchain reported that the wallet transferred 133,298 ETH to a new wallet. However, there is no information indicating the transfer is connected to the MetaMask incident.
Assessments of the incident's severity have diverged. Some observers have suggested the situation could be more serious than publicly stated, while security researcher Taylor Monahan characterized MetaMask's response as a normal security precaution.
The incident occurs as MetaMask undergoes significant organizational changes. Consensys recently announced plans to restructure MetaMask into a separate company focused on consumer finance, with the transition expected to be completed by the end of 2026.
