Analyst Links MetaMask Security Incident to Diverted Validator Rewards

Analyst Kaden reported that a security incident involving MetaMask validators likely involved the tampering of fee recipient addresses. Out of 19 validators that earned rewards, 18 had their rewards diverted to an address linked to Tornado Cash, resulting in the theft of approximately 0.36 ETH. While there is no evidence the attacker can withdraw staked ETH, approximately 17,000 validators have voluntarily exited, involving about 523,000 ETH. It remains unclear if the attacker can modify all fee recipient addresses.