MetaMask confirmed a security incident in parts of its infrastructure on September 30, 2026 and has since been pulling the affected validators of its staking operation out of the network. For you as an ordinary wallet user, nothing changes on the company's account: it says it has found no immediate threat to MetaMask wallets. Anyone who has staked Ethereum through an operator, however, should know which part of their balance will earn nothing over the coming weeks, and why the stake itself is still not at risk.
The case is unusual because the quantified loss is tiny and the countermeasure is enormous. On one security researcher's analysis, less than a thousand dollars in rewards was siphoned off. What is being taken offline in response is a stake that runs into the hundreds of thousands of ether on the same estimate. That imbalance follows from the way Ethereum staking is built, and it is the real lesson of this incident.
What MetaMask disclosed on September 30
The notice on the company's own site is short. MetaMask says it is responding to an ongoing security incident affecting part of its infrastructure and is working on rem...
English (US)