MetaMask Security Incident Forces Ethereum Staking Exits, No Funds at Risk
MetaMask, a popular Ethereum wallet provider, began exiting affected validators after a security incident diverted an estimated 0.36 ETH in block-production payments, according to a security researcher. The company disclosed that the incident affected part of its infrastructure and that it exited affected validators as a precautionary measure. “At this time, we have identified no immediate threat to MetaMask wallets,” the company said.
Ethereum security researcher Kaden estimated that 18 of 19 MetaMask-operated validators that had earned payments for producing blocks sent those payments to an unexpected address. He further estimated that roughly 17,000 validators holding about 523,000 ETH were being withdrawn. However, MetaMask has not confirmed these figures or provided an explanation of how its systems were compromised.
Lido, a service that pools users’ ETH for staking, warned that affected validators could miss rewards during the exit and re-entry process, which could last up to about 45 days. Lido also stated that stETH holders do not need to take any action.
The incident has prompted large wallet movements, with blockchain tracker Lookonchain reporting that a wallet linked to Ethereum cofounder Joseph Lubin transferred 133,298 ETH, worth about $356 million, to a new address. The exact nature of the connection to MetaMask’s response is not clear.
Other companies, such as Ethena, the company behind the USDe token, have also taken precautionary measures by withdrawing funds from cryptocurrency lending platforms like Morpho. Ethena has since redeployed the funds after receiving clarity on the situation.
This incident highlights the ongoing challenges in securing decentralized finance systems and the need for constant vigilance and proactive measures to protect user assets.
Source: coindesk.com — MetaMask security incident forces Ethereum staking exits, no funds at risk
