MetaMask Addresses 'Ongoing Security Incident' in Staking Operations
The popular cryptocurrency wallet provider **MetaMask** has announced an active response to an "ongoing security incident" affecting a portion of its infrastructure. While the company assures users that no immediate threat to individual wallets has been identified, precautionary measures are being taken, including the proactive exiting of affected validators in its non-custodial staking operations.

**MetaMask**, a leading software cryptocurrency wallet provider, confirmed on Thursday it is actively addressing an "ongoing security incident" impacting its internal infrastructure. The company emphasized that it is working in conjunction with external partners and security advisors to remediate the issue.
"At this time, we have identified no immediate threat to MetaMask wallets," the company stated in an official update. However, specific details regarding the nature of the security breach remain undisclosed.
### Precautionary Measures in Staking Operations
As a proactive step, **MetaMask** is initiating the exit of affected validators within its non-custodial staking operations. This measure is being coordinated with clients and partners to mitigate potential risks.
**MetaMask** reiterated the non-custodial nature of its staking services, clarifying that it does not manage withdrawal keys for staked assets on behalf of its clients. This structure is intended to provide an additional layer of security for user funds.
### Impact on Lido Protocol
**Lido**, a prominent decentralized liquid staking solution for **Ethereum**, confirmed that **MetaMask** has taken steps to safeguard client assets linked to its operated **Ethereum** validators. These actions include the exiting of **MetaMask**'s **Ethereum** (ETH) validators within the **Lido** protocol.
**Lido** noted that these precautionary exits might result in foregone rewards and potential downtime penalties if validators are taken offline to reduce risks associated with network penalties. The exit process for relevant validators has commenced, with final withdrawals expected by the end of October 7, 2026.
This is a developing story, and further updates will be provided as more information becomes available.