MetaMask Says Sept. 28 Intrusion Diverted About 0.385 Ether in Staking Rewards

MetaMask said unauthorized access on Sept. 28 redirected about 0.385 Ether (ETH) in staking rewards, and a Nov. 5 update confirmed that all affected Ethereum validators had exited after a precautionary process.

The access allowed changes to reward-recipient addresses for some Ethereum validators. MetaMask said it fixed the issue on Sept. 28, the day it occurred.

The exited validators were operated by MetaMask Staking, the company’s staking operation. The exits complete the precautionary validator process MetaMask began after the infrastructure incident.

The incident temporarily delayed withdrawals for some customers and may have caused staking reward losses. MetaMask said it found no evidence that its wallets or users’ private keys were exposed, or that customers’ staked principal was withdrawn without authorization.