MetaMask Reports No Immediate Wallet Danger After Infrastructure Incident

MetaMask has been hit by a security incident in a portion of its infrastructure. So far, according to the wallet provider, no immediate threat to user wallets has been identified.

As a protective step, the company is also powering down some of the Ethereum staking machines it operates for clients. Which systems were caught up in the incident has not been disclosed.

What Danger Does the MetaMask Security Incident Pose to Wallets?

The takeaway for regular users, at least for now, is to stay calm. According to MetaMask, the problem is being handled internally with assistance from external partners and security advisors.

Security Update: We are responding to a security incident affecting part of our infrastructure.

At this time, we have identified no immediate threat to MetaMask wallets.

As a precaution, we are proactively exiting affected validators within our non-custodial staking operations,…

— MetaMask 🦊 (@MetaMask) September 30, 2026

No one has been asked by MetaMask to move funds or adjust any settings. It expects to release further information as its investigation goes on.

All the same, fraudsters frequently exploit this type of news to distribute bogus security alerts. Any message that arrives unsolicited and requests a recovery phrase should be ignored, as a single phishing signature can empty a wallet.

What Prompted the MetaMask Staking Validator Shutdown

The response also extends to staking, which is separate from standard wallets. MetaMask maintains validators — the machines that lock Ether (ETH) to safeguard Ethereum and collect rewards.

A number of these validators operate within Lido, a platform that allows users to stake ETH and receive a token known as stETH. The staking unit, previously called Consensys Staking, came under MetaMask's control when the company separated from Consensys in September.

The security incident has prompted MetaMask to shut these validators down. Lido expects the final validators to cease operating by the close of Oct. 7. The ETH will then return to Lido in stages and be staked again, a process that might take about 45 days. stETH holders retain their tokens for the whole period.

Lido has likewise told stETH holders that no action on their part is necessary. The protocol says a reserve fund above 6,750 stETH could help cushion any disruption.

Following an investigation into an infrastructure compromise, MetaMask Staking (ex Consensys Staking) has taken precautionary steps to protect client assets related to its operated Ethereum validators.

These steps include exiting its Ethereum (ETH) validators in the Lido… https://t.co/nsox7h0I5k

— Lido (@LidoFinance) September 30, 2026

This latest event adds to security concerns that have recently surrounded the company. Back in July, Consensys reported that a concealed developer from North Korea had been found working on MetaMask code.

MetaMask's next updates should indicate how widespread the incident was. Until then, users may prefer to get news only from MetaMask's official channels.