MetaMask said it was responding to a security incident affecting part of its infrastructure and, as a precaution, worked with partners to exit affected Ethereum validators. In an October 1 update, the company said its investigation to that date had found “no indication that MetaMask wallets or customer funds have been affected,” while noting that containment and verification were continuing. Lido said stETH holders do not need to take action.
What happened in the MetaMask incident?
On September 30, 2026, MetaMask disclosed an ongoing security incident affecting part of its infrastructure. The company said it was working with external partners and security advisers and described the validator exits as a precaution in its non-custodial staking operations. On October 1, MetaMask said it had worked with partners to exit the affected validators.
As an Amazon Associate I earn from qualifying purchases.
The official updates do not identify the attack vector, the specific systems involved, whether data was accessed, the number of affected validators, or a final root cause. MetaMask said containment and verification were continuing, so its statement about customer impact is a status update, not a final forensic conclusion.
Free tools Windows power users keep installed
One-click scans. No signup required.
Are MetaMask wallets or customer funds affected?
MetaMask said that, based on its investigation to date, it had found no indication that MetaMask wallets or customer funds were affected. The company qualified that finding by date and said verification remained ongoing. The validator exits were an operational precaution; the update did not report that customer wallets or funds had been compromised.
#1 Best Overall
- Effortlessly build your crypto portfolio via the all in one Ledger Wallet app: buy, sell, send, receive, swap, stake and more across popular blockchains. 15,000+ coins & tokens in a single dashboard. Keep a close eye on the market. Compare service providers. Track performance. Get timely alerts. Build your portfolio with confidence.
- Enjoy Bluetooth connectivity, iOS access, and hours of battery use with this mobile-first, secure backup signer. Freedom you can depend on.
- Genuine Check: confirm your signer is authentic during setup with the Ledger Wallet app.
- Protect your signer: keep it in mint condition at all times with a bespoke Pod or Case to avoid scratches and everyday wear and tear.
What does the validator exit mean?
Validator exit, withdrawal, and re-entry are distinct stages. An exit removes a validator from the active validator set; withdrawal is the subsequent process by which its funds become withdrawable and return; re-entry involves depositing again and returning to active service. Leaving the active set does not mean funds are immediately back or that the validator has already restarted.
MetaMask describes its staking operations as non-custodial and says it does not manage clients’ withdrawal keys. That is separate from the incident status for MetaMask wallets: the company reported no indication of wallet or customer-fund impact in its investigation to that date.
Rank #2
- Proven security at scale: Over 9 years and millions of cards issued with no known remote hacks, while military‑grade EAL6+ security keeps your private keys locked inside the chip. Your cryptocurrencies stay strongly protected from online attackers.
- Tap once to manage your entire crypto wallet across 90 blockchains - no USB cables or Bluetooth, no batteries, no setup. Access 14,100+ coins & tokens, DeFi, NFTs, and staking instantly from your phone
- Smart backup: Use your second Tangem Wallet as your Backup keys with end‑to‑end encryption; no more papers, pictures. If one card is lost, the remaining can still restore full access, with an optional seed phrase available for advanced users.
- Engineered to last up to 25 years: Waterproof (IP69K), shockproof and tested for extreme temperatures from −25°C to 50°C. A durable cold wallet with long‑term protection and independently audited security.
- Trusted by 6 million users worldwide - buy, sell, swap, stake, and spend cryptocurrency directly. The secure offline storage wallet designed for how people actually use crypto wallets
When will the affected validators exit, and when might funds return?
Lido Governance said on September 30 that the relevant validators had begun exiting and that it expected the final validators to be exited by October 7, 2026. Lido explicitly said those validators would not necessarily be fully withdrawn by that date.
The Tool Desk
Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Lido estimated that the broader exit, withdrawal, and re-entry cycle could take up to approximately 45 days because of an extended entry queue. That is an estimate, not a guaranteed completion date. Lido expected ETH to return gradually as validators completed the stages of the process.
Rank #3
- UNPARALLELED SECURITY: Protect your assets with Trezor Safe 5's NDA-free EAL 6+ Secure Element, offering robust defense and complete transparency.
- EFFORTLESS NAVIGATION: Experience seamless crypto management with the vibrant color touchscreen, designed for intuitive and user-friendly interactions.
- ENHANCED USER EXPERIENCE: Enjoy tactile confirmation with Trezor Touch Haptic Engine, making each interaction precise and engaging.
- SUPPORTS 1000s OF COINS & TOKENS: Securely handle thousands of assets, including Bitcoin, Ethereum, and more, all in one wallet.
- EASY ASSET MANAGEMENT: Monitor and transact seamlessly with Trezor Suite, our user-friendly desktop and mobile app
Do stETH holders need to do anything?
No. Lido Governance said, “No action is required from stETH holders.” Its disclosure said ETH would return gradually as the affected validators progressed through exit, withdrawal, and re-entry. Lido also warned of foregone rewards and possible downtime penalties during the operational process.
Quick Recap
Rank #4
- Dual-chip architecture for maximum protection: The next-gen, fully auditable TROPIC01 chip works alongside a certified EAL6+ Secure Element—completely NDA-free—to deliver radically transparent, industry-leading defense against physical attacks.
- Quantum-ready security: Get protection against future threats with the first-ever hardware wallet designed with quantum-ready architecture.
- See every detail with confidence: Our largest high-resolution color touchscreen makes it easy to navigate your assets, review transactions and manage your coins with clarity.
- Wireless freedom with encrypted Bluetooth control: Manage, buy, swap and stake securely using Trezor Suite on desktop or mobile. Qi2-compatible wireless charging keeps your Trezor powered up. No cables required—security meets convenience.
- Works seamlessly with Android, iOS and desktop: Connect wirelessly or via USB-C to your phone or computer. Manage your crypto anywhere with our companion Trezor Suite app.
How should MetaMask users protect themselves?
- Do not share your Secret Recovery Phrase or private keys in response to messages, calls, or other requests.
- Be wary of unsolicited messages claiming to offer incident support or requiring urgent action.
- Use MetaMask’s official channels for updates. MetaMask said it will never ask for your Secret Recovery Phrase.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
