MetaMask is exiting roughly 17,000 Ethereum validators holding about 523,000 ETH after a security incident in its staking infrastructure, and the rush for the door pushed Ethereum’s exit queue to its highest point of 2026. The company says no wallet funds are at risk and staked ETH was never touched. The attacker’s haul was about 0.36 ETH in block production rewards, less than a thousand dollars at current prices.
The episode started on September 30, when MetaMask said on X that it was responding to a security incident affecting part of its infrastructure and had identified no immediate threat to wallets. It began exiting affected validators in its non-custodial staking operations as a precaution, in coordination with clients and partners. On-chain security researcher Kaden noticed before MetaMask explained anything: 18 of 19 MetaMask-operated validators that had earned payments for producing blocks sent those payments to an unexpected address instead of the regular fee recipient. Gate’s reporting noted the destination address was funded through Tornado Cash, which points to deliberate laundering rather than an operational slip.
A small theft, a big queue
The diverted rewards totaled roughly 0.36 ETH, per the researcher’s estimate, which MetaMask has not confirmed. The company has also not said whether signing keys were exposed. The reason to exit everything is the risk that someone with those credentials could make a validator attest to conflicting blocks, which triggers slashing: Ethereum destroys part of the stake and ejects the validator from service. No slashing occurred here, but half a million ETH is not something any operator should gamble on, so the full precaution is proportionate even though the loss itself was trivial.
The exits swelled Ethereum’s validator exit queue from around 200,000 ETH on Wednesday to more than 700,000 ETH by Thursday. Later readings put it at 773,447 ETH, the largest backlog since December 2025, and one tracker measured 850,736 ETH as the process continued, the highest point of the year. At the peak the expected withdrawal wait stretched from about three and a half days to nearly two weeks. For a network where a large share of liquid staking depends on being able to move in and out on short notice, a two-week wait is a real operational cost even when nothing is actually wrong.
Lido’s warning on lost rewards
MetaMask operates validators inside Lido, the largest liquid staking protocol on Ethereum. Lido published a disclosure saying affected MetaMask validators had begun leaving the system, with the last expected to stop staking by October 7, though their ETH will not necessarily have been withdrawn by then. Moving through exit, withdrawal and re-entry will take about 45 days given the entry queue, and affected stakers can expect weeks without rewards in that window.
stETH holders, Lido’s liquid staking token, need to take no action, and Lido stressed that stETH does not lose value from the process. Large wallet movements and fund withdrawals by Ethena observed during the episode were precautionary, with the funds later redeployed.
The cost side of the incident
The economics are lopsided in a way worth pausing on. The attacker made under $1,000. The precaution covers 523,000 ETH, roughly $1.4 billion in staked value. Add the reward drag across the 45-day cycle for every staker who waited in that exit queue, and the true cost of a small breach lands in the millions. This is the structural issue behind pooled staking at scale: one operator managing tens of thousands of validators concentrates a great deal of network weight behind a few credential sets, so a single intrusion moves queues and yield for everyone. Decentralizing validator operations across more independent node operators shrinks the blast radius of any one breach, at the cost of coordination and efficiency, and incidents like this tend to reopen that debate. MetaMask has not said whether it will change its staking architecture.
The incentive for attackers is also clearer now. Fee recipient manipulation pays almost nothing directly, but probing whether validator credentials can be pushed around tells an attacker exactly where the system is soft. That makes any small successful manipulation worth investigating as a rehearsal rather than a one-off.
What is still unknown
MetaMask has not explained how its systems were compromised, which part of the stack was involved, or whether any other validator operators shared the affected infrastructure. It confirmed the final validator exits should complete by October 7. Withdrawals and re-entries will take considerably longer, so the queue should stay busy for the rest of the month before it clears.
For stakers elsewhere on the network, the practical effect is a longer wait on withdrawals and entry alike, since the queue moves in both directions and every exit eventually pairs with a re-entry. Nothing else changes for regular users: wallet balances, MetaMask wallet functionality, and staking rewards outside MetaMask’s own validators are unaffected.
ETH’s price stayed flat through the episode. It closed at $2,686.10 on September 30, rose to $2,706.39 on October 1 and traded around $2,725 on October 2, a modest grind higher that suggests markets read the incident as contained. Citi raised its bitcoin target to $113,000 in the same week and flagged resistance near $2,800 on ether, so the price context around the queue spike is a market digesting the event rather than reacting to it.
The episode is a reminder that the dull parts of staking infrastructure, feerecipient settings and credential hygiene, carry more risk than headline hacks. Nothing was slashed and almost nothing was stolen, yet half a million ETH had to leave the network to prove the point.