# MetaMask security incident triggers Lido validator exits Author: Abdullah Özkurt Language: English Published: 2026-10-01T05:30:46+03:00 Updated: 2026-10-01T05:30:46+03:00 ![A disconnected network cable beside a server module with an orange fox emblem and an Ethereum symbol](https://kriptometa.com/uploads/metamask-te-guvenlik-olayi-lido-dan-cikis-icin-ekim-hedefi-15d5d175cd47_article.webp) ## Key takeaways - MetaMask is exiting affected validators after a security incident involving part of its infrastructure. - The final Lido validator exits are expected by October 7; returning ETH to the protocol will take longer. - MetaMask reports no immediate wallet threat, and Lido says no action is required from stETH holders. The precautionary move separates risks to staking infrastructure from the security of MetaMask wallets. Lido says stETH holders need not act, while foregone rewards and possible downtime penalties remain in view. MetaMask is exiting staking validators as a precaution after a security incident affecting part of its infrastructure. The move includes validators it operates for the [Lido protocol](https://kriptometa.com/en/glossary/lido) on Ethereum. According to Lido, exits have begun, with the final validators expected to leave active service by the end of October 7. In its [official September 30 statement](https://metamask.io/en-GB/news/user-update), MetaMask said it had identified no immediate threat to wallets. The company is working with external partners and security advisers to investigate and remediate the incident. ## October 7 is not the full withdrawal deadline [Lido’s incident disclosure](https://research.lido.fi/t/security-disclosure-metamask-staking-precautionary-out-of-order-exits/11961) draws an important distinction: validators exiting does not mean all their ETH will have been withdrawn on the same day. The full cycle of exiting, withdrawing and returning ETH to the protocol through renewed staking could take up to approximately 45 days because of the extended entry queue. That estimate should not be read as a mandatory 45-day withdrawal wait for every stETH holder. Lido explicitly says holders need not take any action. The distinction between [staking exits and withdrawals](https://kriptometa.com/en/liquid-vs-solo-staking) makes a single deadline an incomplete description of the process. **There are three separate stages:** A validator leaves active service, its ETH is withdrawn, and the funds join the entry queue to be staked again. The October 7 target concerns the first stage; the roughly 45-day estimate covers the full cycle. ## MetaMask reports no immediate threat to wallets > “At this time, we have identified no immediate threat to MetaMask wallets.” MetaMask’s written statement, September 30 The company also stresses that its staking service is non-custodial and that it does not manage withdrawal keys on behalf of clients. Wallet account and permission controls sit at a different service layer from validator operations. The wallet permissions covered in our [MetaMask review](https://kriptometa.com/en/metamask-review) should therefore be distinguished from the staking infrastructure precaution announced here. The qualification “at this time” matters. It describes the company’s current findings, rather than a final conclusion to the investigation or a guarantee that every risk has been resolved. ## Foregone rewards and downtime penalties remain possible Lido warns of foregone staking rewards and possible downtime penalties if validators are taken offline in the near term. Precautions intended to limit potential network penalties may still carry an economic cost. The protocol points to its diverse set of node operators and an ad hoc reserve exceeding 6,750 stETH among the safeguards designed to contain disruption. The disclosure does not identify a settled loss figure or announce a confirmed compensation payment. As our [analysis of Lido’s revenue and security costs](https://kriptometa.com/en/lido-analysis) explains, operators’ working conditions matter alongside the amount of assets staked. For the wider [Ethereum ecosystem](https://kriptometa.com/en/news/ethereum), the next concrete developments to watch are progress on exits, any realised reward shortfall or penalties, and the findings of the security investigation. [Lido’s official update on validator exits and stETH holders](https://x.com/LidoFinance/status/2105443679905235344)