MetaMask Validators Exit Following Infrastructure Security Incident

MetaMask initiated a preventive exit of its validators from Lido following an infrastructure security incident reported on September 30, 2026. On-chain analysis by researcher Kaden indicates that 18 out of 19 validators that received block rewards had their payments diverted to an address funded via Tornado Cash, resulting in a loss of approximately 0.36 ETH. While MetaMask has not confirmed specific figures, reports suggest that nearly 17,000 validators, representing about 523,000 ETH, have been exited. Approximately 821 validators remain active, with three suspected of being compromised. The incident does not affect withdrawal keys, though there is a residual risk of slashing if signing keys were leaked.