● Covered by 1 source · 1 reportLow impact1 neutral
MetaMask confirms infrastructure security incident, states user wallets unaffected
Key points
- Threat actor diverted 0.385 ETH in staking rewards.
- User wallets, Secret Recovery Phrases, and private keys were not compromised.
- Affected systems were secured on the same day.
- MetaMask is refunding lost rewards to affected customers.
Infrastructure Security Incident Confirmed
MetaMask, a cryptocurrency wallet provider, confirmed a security incident involving its infrastructure. A threat actor gained access to systems that store recipient addresses and diverted approximately 0.385 ETH in execution-layer staking rewards. This incident was identified and addressed on the same day it occurred.
User Wallets Remain Secure
MetaMask stated that the incident did not affect MetaMask wallets or its wallet infrastructure. There is no evidence that customers' staked principal or withdrawal keys were compromised. Additionally, user Secret Recovery Phrases or private keys were not compromised during the attack.
Impact on Staking Operations
The incident led to the exit of affected validators within non-custodial staking operations. This precautionary measure resulted in some customers experiencing temporary withdrawal delays and potentially missed staking rewards while validators were exiting or awaiting reactivation. MetaMask is working directly with affected customers to address these impacts and refund the lost rewards.
No Action Required for Wallet Users
MetaMask advised that users of its wallet do not need to take any action as a result of this incident. Customers whose staking arrangements were affected should follow guidance provided directly by MetaMask or their staking provider.
✨ This summary was generated by AI from the outlets' reporting listed below. It is not independently verified and may contain errors — check the original sources. How BrevFeed works →
The daily brief
One email each morning: the day's tech stories, clustered across outlets and summarized. No account needed.
One email a day. Unsubscribe in one click, any time.
Today's brief
Spend a few minutes, get the whole day. Every topic's top stories in one hands-free rundown — listen, watch, or read the transcript.
▶ Play today's brief
New every morning, and the back catalogue is archived by date.
Reporting from
MetaMask reported an infrastructure security incident where a threat actor diverted 0.385 ETH in staking rewards by accessing systems storing recipient addresses. The company stated that user wallets, Secret Recovery Phrases, and private keys were not compromised, and the affected systems have been secured.