🚨 MetaMask got popped internally, yanking the affected staking validators out

MetaMask fessed up to an undisclosed security incident that hit part of its infrastructure and is pulling affected Ethereum validators out of its staking op as a precaution. The company's line: no immediate threat found to user wallets, and client funds were never touchable anyway since it doesn't hold their withdrawal keys. Cool story — noted.

▪️ What actually got hit stays vague as hell: 'part' of MetaMask's infrastructure broke loose on someone else's watchdog clock — outside security advisers were brought in to contain and patch it.
▪️ 'No immediate threat' to user wallets, per the company — which conveniently also means nobody has officially explained what data or systems sat next to whatever got compromised.
▪️ The evacuation targets non-custodial staking ops — Ethereum validators run inside Lido — because bailing early beats getting slashed if the attackers are still lurking inside.
▪️ Lido separately confirmed the same infra compromise and pulled its own operated Ethereum validators out too — eating foregone rewards plus possible downtime penalties if those machines go dark soon.
▪️ Exits already started rolling — the final affected ones are expected exited (not fully withdrawn) by end of October 7th during restructure mania — meanwhile a wallet tied to Ethereum co-founder…
▪️ Culprits' denial index running high today.

@pixeos