MetaMask Validator Exit: $3B Staked ETH Pulled

MetaMask is exiting Ethereum validators in Lido after an undisclosed security incident. Here's what the $3B staked ETH move means for ETH and stETH holders.

MetaMask has started pulling its Ethereum validators out of the Lido protocol after disclosing a security incident that touched part of its infrastructure. The company says it found no immediate danger to MetaMask wallets, but it is not taking chances with the validators it operates. The MetaMask validator exit affects a staking operation that manages more than $3 billion in staked Ether, according to its own website.

What happened

MetaMask disclosed that a security issue had affected certain of its systems. It gave no details on what the problem was, and by Thursday afternoon in Asia it still had not issued an account of how its systems were compromised. What is known is that the team is looking into the matter internally and has enlisted outside partners and security advisors.

The precautionary step applies to validators in MetaMask's non-custodial staking business. Lido says MetaMask Staking began removing its Ethereum validators from the protocol on Wednesday. All of the affected validators are due to have exited by the close of Oct. 7.

Ethereum security researcher Kaden posted on X that among 19 MetaMask-operated validators that received block-production payments, 18 directed those payments to an address that was not expected. Kaden calculated the diverted amount at approximately 0.36 ETH, and he put the wider precautionary exits at about 17,000 validators holding some 523,000 ETH. MetaMask has not confirmed those figures.

Why it matters

By committing coins to help secure Ethereum, holders earn ETH through staking. Operators such as MetaMask run the computers doing that work, yet customers keep separate control over where their staked coins may be withdrawn. Ethereum treats staking withdrawal destinations and block-production payment destinations as two separate matters. That separation means a modified payment address can redirect income without disturbing the original stake.

For ordinary holders, the essential takeaway is that the response came at the operator level, not as a breach of wallets. MetaMask says no immediate threat exists to MetaMask wallets, and Lido says stETH holders need take no action. Even so, the episode reveals how much trust users place in staking operators to run the machinery underlying their yield.

The numbers involved are large. If Kaden's estimate turns out to be close, 523,000 ETH amounts to a significant portion of staked Ether. Through MetaMask Portfolio, MetaMask's staking service is offered in three forms: pooled staking, validator staking, and liquid staking via Lido and Rocket Pool. Lido's stETH token represents users' pooled stake and accumulated rewards.

Market reaction

Ethereum is trading at $2,681.26, up 0.33% over the past 24 hours, with $14,660,348,420 in volume and a $327,361,653,040 market cap. The muted price move suggests traders are not treating this as a systemic event right now, but the story is still developing.

More activity on the blockchain also caught attention. Blockchain tracker Lookonchain reported that a wallet associated with Ethereum cofounder Joseph Lubin moved 133,298 ETH — worth about $356 million — into a new address. It was not immediately possible to establish whether that transfer was connected in any way to MetaMask's response. Separately, as the security disclosures came to light, Ethena pulled funds from lending platform Morpho, among them roughly $75 million from a vault holding Ripple's RLUSD stablecoin and $60 million from another holding PayPal's PYUSD. A source close to Ethena called the withdrawals a precaution, and onchain data indicates the funds were put back to work afterward, once the picture grew clearer.

What to watch next

The most important unknown is the nature of the security issue. MetaMask has not disclosed it, and until it does, the market is working with limited information. The next hard checkpoint is Oct. 7, when the last affected validators are expected to exit.

After that, the waiting begins. According to Lido Finance developer Will Shannon, ETH from validators run by MetaMask Staking ought to flow back into the protocol steadily as validators finish the exit, withdrawal, and re-entry cycle. Given the lengthy entry queue, he put that cycle at as long as roughly 45 days.

For as long as they are out of service, the affected validators will forgo rewards. They might also incur penalties if taken offline before their exits are complete. Neither MetaMask nor Lido has reported any slashing, which is an encouraging signal. Slashing is the process by which Ethereum destroys part of a stake and drops a validator from service, typically after conflicting records are approved.

For stETH holders, Lido's message is simple: no action needed. For ETH holders, the watch items are whether MetaMask confirms Kaden's figures, whether any slashing emerges, and whether the re-entry queue stretches beyond the 45-day estimate. Those details will shape whether this stays a contained operational hiccup or becomes something more uncomfortable for staking sentiment.

FAQ

What is the MetaMask validator exit?

Following a security incident that touched part of its infrastructure, MetaMask chose as a precaution to take the Ethereum validators it runs out of the Lido protocol. The company states that no immediate threat to MetaMask wallets was uncovered.

Why did MetaMask exit its validators?

MetaMask has not revealed the specific security issue. It called the move precautionary and said it is investigating internally while collaborating with external partners and security advisors. Lido said the exits got underway Wednesday.

How long will the MetaMask validator exit take?

Lido anticipates that the final affected validators will exit by the close of Oct. 7. Will Shannon of Lido puts the complete exit, withdrawal, and re-entry cycle at as long as about 45 days, citing the lengthy entry queue.

Market snapshot

Prices at the time of writing (Oct 1, 2026 08:00 UTC).

Ethereum (ETH): $2,681.26 — 24h +0.33%

Trade ETH now →

MetaMask Validator Exit: $3B Staked ETH in Precautionary Move