MetaMask began exiting roughly 17,000 Ethereum validators holding about 523,000 ETH, worth around 1.4 billion dollars, from its non-custodial staking service after a security incident in its staking infrastructure. The company said user wallets are not affected and staked funds face no direct threat, but the exits are swelling Ethereum’s withdrawal queue to levels not seen since December 2025, and anyone with ETH in a MetaMask-linked staking position will sit through weeks without rewards.
The problem surfaced when Ethereum security researcher Kaden, who works with the auditing firms Spearbit and Cantina, published an analysis October 1 showing that block rewards from 18 out of 19 MetaMask validators that had earned block-production payments went somewhere other than the designated fee recipient. The unusual receiving address turned out to have been funded through Tornado Cash, the crypto mixer, a detail Kaden read as a sign of outside intrusion rather than a manual configuration mistake. An operator error would not route payments through a mixer, and the attacker’s choice to fund the address with Tornado Cash suggests someone trying to stay untraceable.
The diverted total is small. Kaden puts it at roughly 0.36 ETH, under 1,000 dollars at the October 1 price near $2,695 per ether. The suspicious address holds 0.46 ETH in total, including its 0.1 ETH funding from Tornado Cash, and has made no outgoing transactions. MetaMask itself has not confirmed the researcher’s numbers, explained how its systems were compromised, or identified what specific infrastructure was attacked. The company said only that it is investigating and would post updates as needed, a level of disclosure that has left even Lido, a direct counterparty, describing the situation as still under investigation.
Why the whole stack is exiting
MetaMask Staking, the business formerly known as ConsenSys Staking, operates validators both independently and on behalf of Lido, the largest staking protocol on Ethereum. Lido said in a research forum post that MetaMask-operated validators had begun leaving its system after the breach of validators’ infrastructure. The last Lido-linked validators are expected to stop staking by October 7. MetaMask’s own validator park is expected to clear the exit queue by around the same date, according to the company’s own statement.
Validators do not leave Ethereum instantly. Exit requests, balance withdrawals and re-entry applications all pass through queues built into the protocol. Lido estimates the whole cycle, exit, withdrawal, re-entry and a return to earning, will take about 45 days, a window in which affected validators earn nothing. Lido told stETH holders they do not need to take any action, since the token keeps accruing value from the rest of the validator set. The real cost is opportunity cost, not principal, and the same reasoning applies to anyone stethering directly through MetaMask rather than through a pooled wrapper.
| Metric | Value | Source |
|---|---|---|
| Validators exiting | about 17,000 | researcher estimate |
| ETH leaving staking | about 523,000 | researcher estimate |
| ETH diverted in rewards | 0.36 | researcher estimate |
| Ethereum total exit queue | 773,447 ETH | ValidatorQueue data |
| Wait to clear the queue | 13 days, 10 hours | ValidatorQueue data |
| Rewards gap per validator | about 45 days | Lido estimate |
| Lido-linked deadline | Oct 7, 2026 | Lido disclosure |
The queue effect across Ethereum
The precautionary exits have pushed Ethereum’s total validator exit queue to 773,447 ETH, its highest level in nine months, according to ValidatorQueue. The previous surge in May left roughly 476,000 ETH waiting, so the current backlog is more than half again as large. Ethereum’s entry and exit queues share a churning limit, so a large exit wave also slows the rate at which new validators can join and start earning. Developer data suggests the backlog implies roughly a 13-day wait for an exiting validator and around 7.6 days of additional sweep delay for withdrawals once the exit clears.
Anyone holding ETH through a MetaMask-run staking position, including via Lido wrappers, is watching weeks of zero yield arrive without any choice in the matter. Retail holders of stETH are untouched, per Lido, but validators run directly by MetaMask customers still face the same silent period. Institutions with staking mandates keyed to continuous rewards will want clarity on whether their MetaMask-linked positions fell inside the 17,000 validator count. Validators earn roughly 3 percent a year in rewards at current issuance and network activity, so a 45-day gap costs a little under 0.4 percent of the staked principal in forgone yield.
The breach itself is limited in scope, so far, to the block-production fee recipient address, a piece of metadata validators set when proposing blocks. It would have taken a compromised key or a misconfigured reward routing rule to redirect those payments. MetaMask has said neither its wallet product nor user keys were touched, which is the main reassurance it can offer three days after the researcher’s post went public. The distinction matters to a company whose flagship product is a hot wallet used by tens of millions of people.
The longer test is procedural. ConsenSys runs one of the larger institutional staking operations in the US, and a breach that reaches the block-reward plumbing of validator infrastructure, however small the financial impact, invites a closer look at how operators isolate signing keys from reward routing. No other staking provider has reported similar symptoms. Ethereum’s broader validator set, more than one million active validators, shows no signs of correlated compromise, and no other operator has pulled a comparable share of its fleet offline in the same window.