Home›Crypto›Ethereum›MetaMask incident drives Ethereum validator exits to n…

MetaMask incident drives Ethereum validator exits to nine-month high

Lido estimates up to about 45 days for validators to fully exit, withdraw, and re-enter after the Sept. 30 MetaMask incident disclosure.

Reported · Written up by our desk · Ethereum

MetaMask has been pulling thousands of Ethereum validators after a security breach redirected rewards, creating a backlog for stakers trying to exit, according to CryptoSlate. Crypto onchain security researcher Kaden estimated that about 17,000 validators operated through MetaMask, holding roughly 523,000 ETH, were proactively exited following analysis that transaction-fee rewards from 18 of 19 validators were diverted to an address funded through Tornado Cash, an Ethereum-based privacy protocol that mixes and anonymizes transactions.

Kaden said the attacker appears to have captured about 0.36 ETH, while noting the bigger concern is whether the attacker gained enough access to alter fee recipients and potentially reach validator signing keys, which could lead to slashable behavior. CryptoSlate added that MetaMask has not confirmed Kaden’s figures or disclosed the cause.

MetaMask said a portion of its infrastructure was compromised and it was exiting affected validators as a precaution while working with clients, partners, and security advisers, and that it identified no immediate threat to MetaMask wallets. The outlet also cited Lido’s estimate of up to about 45 days for exit, withdrawal, and re-entry after MetaMask’s Sept. 30 incident disclosure.

Latest closeEthereum $2,718.62 ▲1.3%

More like this

Sources