MetaMask says it is responding to an ongoing security incident affecting part of its infrastructure and has taken affected Ethereum validators out of service as a precaution. The company said it was working with external partners and security advisers and reported no immediate threat to MetaMask wallets.
MetaMask did not disclose the technical details of the incident. Lido said the validator exits could lead to foregone rewards and possible downtime penalties as the operation reduces risk. In an October 1 update, MetaMask said there was no evidence that customer funds or wallets had been affected.
What users and operators should watch
- Rely on MetaMask’s official channels for incident updates.
- Never share recovery phrases or private keys in response to unsolicited messages.
- For staking and infrastructure operators, document containment decisions and validate partner communications before acting.
The limited disclosure means observers should avoid speculating about root cause or impact. The available facts support continued monitoring while the company completes containment and verification.
Source: The Hacker News report; MetaMask user update.