MetaMask Pulls Its Validators From Lido After Someone Diverts Block Rewards

MetaMask Staking is pulling its Ethereum validators out of Lido after block rewards from its infrastructure were redirected to an address funded through Tornado Cash. The amount that actually moved is tiny: about 0.36 ETH, under $1,000. The amount leaving Lido as a precaution is not. One researcher counts roughly 523,000 ETH, around $1.4 billion.

I keep coming back to that ratio. A leak you could cover with a month of coffee, and a $1.4 billion stake gets yanked out of the largest liquid staking protocol on Ethereum. That tells you how little MetaMask wants to guess about what the attacker could reach.

What MetaMask and Lido have said

On September 30, MetaMask posted on X that it was responding to a security incident affecting part of its infrastructure. It said it had found no immediate threat to MetaMask wallets and was exiting affected validators within its non-custodial staking operations. A user update on metamask.io followed.

Lido confirmed the exits on X and in a governance forum disclosure, calling the cause an infrastructure compromise under investigation. MetaMask Staking is the former Consensys Staking, a node operator inside Lido. The last affected validators were expected to finish exiting, though not fully withdrawing, by the end of October 7.

Getting the ETH back is the slow part. Lido said exited stake returns to the protocol gradually and the full exit, withdrawal and re-entry cycle could take up to 45 days because of Ethereum's long entry queue. It also warned of foregone rewards and possible downtime penalties for validators taken offline before their exits complete.

Both firms stressed that MetaMask does not hold withdrawal keys for client stake. Lido told stETH holders to do nothing and pointed to its spread of node operators and a reserve fund of more than 6,750 stETH.

What the chain shows

The only public numbers on the theft itself come from an independent researcher. Kaden said on X that 19 MetaMask validators had won block rewards and that 18 of those payments went to a Tornado-funded address instead of the correct fee recipient. Neither MetaMask nor Lido has confirmed this.

The fee recipient matters here. It is the address a validator names to receive the priority fees and MEV from blocks it proposes. For 18 of 19 payouts to land somewhere else, someone had to be able to change that setting, which points at validator configuration rather than anything on the wallet side. That reading is mine, not MetaMask's. The company has not said what was compromised.

Kaden's own caveats are worth keeping. He said it was unclear whether the attacker could change fee recipients across the whole validator set, and that they "likely never had the ability" to withdraw staked ETH. But depending on how signing access was obtained, he noted, validators could in principle have been deliberately slashed. That is probably the real reason for exits this broad.

The scale figures do not line up cleanly. Kaden's estimate was about 17,000 validators and 523,000 ETH, with 821 potentially affected validators still to leave. AMBCrypto, citing Kaden, put the total near 513,000 ETH. Validator Queue data it reviewed showed roughly 10,500 validators and 336,000 ETH leaving over the same stretch, though that is a market-wide figure and not all MetaMask. The exit queue itself jumped from about 205,000 ETH to more than 850,000 ETH within two days, per AMBCrypto.

Knock-on effects, so far limited

Aave founder Stani Kulechov said the lending protocol was watching alongside Lido and saw no impact on its markets, where stETH is a heavily used collateral asset. Ethena's Guy Young said the assets backing USDe have no direct exposure to stETH or any other liquid staking token. ETH itself stayed below $2,800 through the scramble.

Linea, the Consensys-built L2, said on October 2 that validators supporting its Yield Boost vault were also being exited, and that the vault's funds and control were unaffected.

Lubin's line: wallets are safe, details are not coming

Joseph Lubin, founder of Consensys, wrote on X on October 2 that, based on the investigation so far, there is no indication MetaMask wallets or customer funds in wallets were affected, and that users hold their own keys. On the missing detail he was blunt: "We do not publicly discuss the details of an open incident."

Fair enough as incident-response policy. It also leaves the staking market exactly where it started, with 523,000 ETH in motion and no public explanation.

Not the first Lido operator to bolt

Kiln exited all of its Ethereum validators in September 2025 after its CEO flagged a potential infrastructure compromise. Consensys Staking, MetaMask Staking's earlier name, once pulled 125 Lido validators by accident in 2023 after a miscommunication, per Crypto Briefing. That was a mistake, not an attack, but it shows how fast a single operator can move a lot of stake.

One report dated October 6 says the exits are nearly done and that MetaMask Staking will publish a post-mortem in the coming weeks. I could not confirm that against MetaMask's own channels, so treat it as unverified. Until a post-mortem exists, the only hard number in this story is 0.36 ETH, and what exactly was breached is still anyone's guess.