Metamask began pulling its Ethereum validators on Sept. 30 after a security incident apparently diverted less than $1,000 in block tips. Outside researchers estimate roughly 17,000 validators holding about 523,000 ETH were sent toward the exits, even though Metamask says wallets and customer funds show no signs of being affected.
Metamask started proactively exiting its Ethereum validators on Sept. 30 after a security researcher estimated that an attacker diverted about 0.36 ETH in block tips, a haul worth less than $1,000 at roughly $2,700 per ether. The response dwarfed the theft. Researcher Kaden estimates that roughly 17,000 validators holding about 523,000 ETH were sent toward the exits, though Metamask hasn't confirmed those figures.
Lido confirmed separately that validators operated by Metamask Staking are being removed from its protocol. The visible theft was pocket change by crypto-hack standards, yet the defensive maneuver involved hundreds of thousands of ether.
Metamask says wallets are unaffected
Metamask disclosed the incident at 7:38 p.m. Eastern time on Sept. 30, saying it was responding to a compromise affecting part of its infrastructure and had found no immediate threat to Metamask wallets. On Oct. 1, the company said there remained no indication that Metamask wallets or customer funds had been affected.
The staking architecture helps explain why. Ethereum validators generally put up 32 ETH, but Metamask says its staking operation is non-custodial and it doesn't control customers' withdrawal keys, which are what allow the underlying stake to be withdrawn. An attacker able to tamper with validator settings therefore wouldn't automatically hold the keys to the vault.
The thief apparently found the tip jar
Kaden's onchain reconstruction points to the tip jar rather than the stake itself. He reported that 19 Metamask validators won block rewards and payments, but 18 went to the wrong fee-recipient address. The address had been funded through the ether mixing service Tornado Cash, and the diverted payments totaled about 0.36 ETH. A separate reconstruction traced the activity to roughly four and a half hours on Sept. 30.
Changing the fee recipient can reroute a validator's block tips without moving its 32 ETH stake. The bigger risk would come if an attacker obtained validator signing keys, which can't withdraw the stake but can potentially make proof-of-stake validators commit offenses punishable by Ethereum's slashing system. Slashing destroys part of a validator's stake and removes it from service.
Kaden said three exploited validators had not yet exited when he posted his analysis, and estimated about 821 potentially affected validators remained active. In a separate count, blockchain data infrastructure firm Bitquery tallied 16,965 validators holding 565,056 ETH that had exited or entered the queue by Oct. 1. Its numbers differ from Kaden's because the two measured different sets at different times, and neither figure has been publicly confirmed by Metamask.
Bitquery also estimated that a hypothetical simultaneous slashing of roughly 17,000 validators could have burned around 22,000 ETH, though no validators had been slashed in its reconstruction.
A one-week exit can become a 45-day wait
Lido expects the affected validators it uses to finish exiting by the end of Oct. 7, but getting that ether earning again is another matter. Validators must clear Ethereum's exit process, withdraw, and eventually rejoin through the entry queue, and Lido estimates the complete trip could take up to approximately 45 days. During that stretch, the exited stake isn't earning validator rewards.
The queue was already crowded before this incident. Validator queue data via beaconcha.in shows about 393,795 ETH waiting to leave Ethereum's validator set, with an estimated four days and six hours required to clear the exit queue before another withdrawal delay applies. Lido says stETH holders don't need to take action, while Metamask is telling wallet users the same thing and warning them not to surrender recovery phrases to anyone claiming to offer protection.
The ledger presents a strange scorecard. Roughly 0.36 ETH apparently went missing, while hundreds of thousands of ETH shuffled toward the exits — and the stake involved faces potentially weeks of lost earning time before it can rejoin.
Source: Bitcoin News
Trading involves risk.
Risk Disclaimer
