MetaMask Pulls Ethereum Validators From Lido After Infrastructure Security Incident

MetaMask has begun withdrawing its Ethereum validators from the Lido staking protocol following an "ongoing security incident" affecting part of its infrastructure, the companies said on Wednesday, October 1, 2026. The wallet developer said it found no immediate threat to MetaMask wallets. Lido disclosed the exits in a governance forum security notice, citing an infrastructure compromise under investigation. The final validators are expected to have exited, though not fully withdrawn, by the end of October 7. Lido said the move could mean forgone rewards and possible downtime penalties. Both firms stressed the arrangement is non-custodial and MetaMask does not hold client withdrawal keys. Unconfirmed onchain analysis by researcher Kaden indicates 19 MetaMask validators won block rewards, 18 routed to a Tornado Cash-funded address, totaling roughly 0.36 ETH. About 17,000 validators holding some 523,000 ETH, worth around $1.4 billion, are being exited as a precaution. Lido cited 6,750 stETH in reserve buffers. It is the second such episode at a major Lido operator in just over a year.