MetaMask Security Incident Triggers Validator Exits, Wallets Remain Safe

Highlights:

• MetaMask says a security incident hit part of its infrastructure, but wallets remain safe.
• As a precaution, MetaMask is exiting affected Ethereum staking validators while it investigates.
• MetaMask has not explained what caused the incident yet and says more updates will follow.

MetaMask is responding to a security incident affecting part of its infrastructure and has started exiting affected validators from its staking operations as a precaution. However, the crypto wallet provider says it has found no immediate threat to MetaMask wallets.

MetaMask disclosed the incident in an official X post on October 1 and directed users to an update on its website. The company’s website notice, published on September 30, said its team is working with external partners and security advisers to address the issue.

MetaMask has not disclosed which part of its infrastructure was affected or how the incident happened. It also has not reported any direct impact on regular MetaMask wallet users. “We have identified no immediate threat to MetaMask wallets,” the company said in its security update.

Security Update: We are responding to a security incident affecting part of our infrastructure.

At this time, we have identified no immediate threat to MetaMask wallets.

As a precaution, we are proactively exiting affected validators within our non-custodial staking operations,…

— MetaMask 🦊 (@MetaMask) September 30, 2026

MetaMask Starts Exiting Affected Validators

As part of its response, MetaMask is proactively exiting validators linked to its non-custodial staking operations. The process is underway with clients and partners while the investigation and remediation work continues.

Validators play an important role in Ethereum staking. They help verify transactions and support the security of the Ethereum network while earning staking rewards. Exiting a validator means removing it from active participation in Ethereum’s validation process.

MetaMask described the move as a precaution, not evidence that its wallet service has been compromised. The company also stressed that its staking service is non-custodial. MetaMask does not manage the withdrawal keys for crypto staked on behalf of its clients. Those keys are important because they control where staked assets can ultimately be withdrawn.

According to MetaMask, it is coordinating the validator exits with the relevant clients and partners instead of taking control of customer withdrawal credentials.

MetaMask Continues Security Investigation

For now, MetaMask has provided limited technical information about the incident. The company has not publicly identified the attack method, affected systems, or whether an outside attacker accessed any part of its infrastructure. Its response is focused on containing the issue and reducing possible risks while the investigation continues.

MetaMask said it is addressing and remediating the incident internally with support from external security advisers and partners. The company also plans to keep monitoring the situation and publish further information when appropriate. The distinction between MetaMask wallets and its staking infrastructure is important for users following the incident. Based on the company’s latest statement, the security issue affects part of its infrastructure, while MetaMask has not identified an immediate threat to its wallet product.

No action for regular MetaMask wallet users was announced in the update. The company has also not reported any confirmed loss of wallet funds related to the incident. Further details may become available as MetaMask completes its investigation and continues the validator exit process.

Separately, on-chain tracker Lookonchain reported on October 1 that a wallet linked to Ethereum co-founder Joseph Lubin transferred 133,298 ETH, worth about $356.2 million, to a new wallet. The transfer occurred as MetaMask was responding to its infrastructure security incident. However, MetaMask and Lookonchain have not linked the ETH movement to the incident.

🚨 MetaMask Staking Incident + $356M ETH Transfer

MetaMask is dealing with a security incident affecting part of its staking infrastructure, while a wallet linked to Ethereum co-founder Joseph Lubin has moved a significant amount of ETH.

• MetaMask security incident: The team… https://t.co/nghkoggxjV

— Ethereum Daily (@ETH_Daily) October 1, 2026