MetaMask said some of its infrastructure was affected by a security incident and that it was exiting affected Ethereum validators in its non-custodial staking service as a precaution. It said there was no immediate threat to wallets and that it does not hold withdrawal keys for stakers. Users should ignore any support messages asking for seed phrases.
What to do: Validators exited by October 7; no user fund loss reported.
· 35 days ago · MetaMask staking infrastructure · BleepingComputer
SourcesBleepingComputer
Why this score
Tens of millions of wallet users potentially exposed to follow-on scams (impact 3), limited confirmed impact (exploitability 1), finance touched (criticality 1).