# MetaMask Says Sept. 28 Intrusion Diverted About 0.385 Ether in Staking Rewards

By Simon Yoon

Canonical URL: https://www.tokenpost.com/news/technology/50989
Published: 2026-11-07T18:17:15.000Z
Updated: 2026-11-07T18:17:15.000Z
Section: Technology

> The company said it fixed the issue that day and completed exits for all affected Ethereum validators by Nov. 5.

MetaMask said unauthorized access on Sept. 28 redirected about 0.385 Ether (ETH) in staking rewards, and a Nov. 5 update confirmed that all affected Ethereum validators had exited after a precautionary process.

The access allowed changes to reward-recipient addresses for some Ethereum validators. MetaMask said it fixed the issue on Sept. 28, the day it occurred.

The exited validators were operated by MetaMask Staking, the company’s staking operation. The exits complete the [precautionary validator process](<https://www.tokenpost.com/news/technology/31510>) MetaMask began after the infrastructure incident.

The incident temporarily delayed withdrawals for some customers and may have caused staking reward losses. MetaMask said it found no evidence that its wallets or users’ private keys were exposed, or that customers’ staked principal was withdrawn without authorization.



## Links in this article

- [precautionary validator process](https://www.tokenpost.com/news/technology/31510)
