MetaMask has begun withdrawing its Ethereum validators from Lido due to a security incident affecting its infrastructure.
MetaMask Withdraws Validators Following Security Concerns
In light of a recent security incident, MetaMask has decided to withdraw its Ethereum validators from the Lido staking protocol as a precautionary measure. This step comes after the wallet provider reported an ongoing issue affecting part of its infrastructure.
Though the company reassured users that there is currently no direct threat to MetaMask wallets, it is actively collaborating with security experts to resolve the situation. The withdrawal of validators pertains specifically to its non-custodial staking operations, with the process expected to conclude by October 7.
"As a precaution, we are proactively exiting affected validators within our non-custodial staking operations," MetaMask stated on social media.
The exit from Lido, the leading liquid staking platform on Ethereum, may result in some loss of rewards, and validators could incur penalties if they go offline during the exit process. Lido confirmed that the returned ETH might take up to 45 days to be fully re-integrated due to the platform's lengthy queue for withdrawals.
Both MetaMask and Lido emphasized that this operation is non-custodial, meaning that MetaMask does not control the withdrawal keys for the staked assets. Lido assured stETH holders that they do not need to take any action, highlighting its reserve fund as a safeguard against potential disruptions.
Initial reports suggest that the breach might have affected a small portion of the funds, with around 0.36 ETH mistakenly sent to a Tornado Cash-linked address. A total of 19 MetaMask validators, which have accrued block rewards, are among those impacted, but analyses indicate that 17,000 validators holding approximately 523,000 ETH are also in the process of being exited under precautionary measures.
This incident marks a significant event for the crypto community as it follows a similar occurrence last year involving another major validator operator, Kiln, and highlights the ongoing vulnerabilities faced in the staking ecosystem. A thorough investigation is underway to determine the specifics of the breach and ensure user assets remain secure.
