Breaches and incidents
MetaMask (Consensys): security incident in part of its infrastructure, staking validators exited
MetaMask said on 30 Sep it was “responding to an ongoing security incident affecting part of our infrastructure” and was “proactively exiting affected...
- Disclosed
- Verification
- Checked against a primary source
What happened
- MetaMask said on 30 Sep it was “responding to an ongoing security incident affecting part of our infrastructure” and was “proactively exiting affected validators within our non-custodial staking operations”; on 1 Oct it said “there is no indication that MetaMask wallets or customer funds have been affected.”
- Root cause: not disclosed.
- No attacker named.
- MetaMask says it does not manage withdrawal keys for client stake, is working with partners and security advisors on containment and remediation, and promised further updates; status ongoing as of 1 Oct.