Exchange Ranking
Top Exchanges
24h Volume Ranking
Popularity Ranking
Exchange BTC Balance
Proof of Reserves
Decentralized Exchanges
Funding Rate
Funding Heatmap
Liquidation Data
Max Pain
Long/Short Ratio
Whale L/S Ratio
Binance/Okex/Huobi L/S
Bitfinex Margin L/S
ETF Tracker
Solana ETF
XRP ETF
Hong Kong ETF
Bitcoin Treasuries
Crypto Reversal
Ethereum Reserves
HyperLiquid Wallet Analysis
Hyperliquid Whale Watch
Large Transactions
On-chain Movement
Bitcoin ROI
Stablecoin Market Cap
Options Analysis
News
Articles
Economic Calendar
Features
Wallet
Contract Calculator
Security
Collections
Watchlist
Following
ETH MetaMask suspends some Lido pledged nodes due to an "ongoing security incident"
On Tuesday, MetaMask said its infrastructure was being affected by an "ongoing security incident." As a precautionary measure, the company has begun withdrawing its Ethereum verifier from the Lido pledge agreement.
The development team of this wallet pointed out that "no direct threat to MetaMask Wallet has been found" and emphasized that they are actively addressing and repairing the issue internally and in conjunction with external partners and security consultants. In unmanaged pledge operations, MetaMask is withdrawing from affected validators and working together with clients and partners.
The MetaMask Staking service, formerly known as Consensus Staking, runs a validator on Lido, the largest liquidity pledge protocol on Ethereum. Lido disclosed the withdrawal in a security bulletin issued by its governance forum late Tuesday, citing a "breach of infrastructure under investigation." The move could result in missed rewards and could face downtime penalties if the validator goes offline in the next few days to limit the risk of network fines. Relevant validators have started the exit process, and it is expected that the last batch of validators will be withdrawn before the end of October 7 (although they have not yet been fully withdrawn). Lido said the exit measures were only part of the process, and neither company said whether MetaMask's validators running elsewhere were also involved.
It takes a long time to withdraw funds, and the unmanaged attribute ensures the safety of user assets
Lido pointed out that due to Ethereum's long queue, it may take as long as 45 days for the validator to complete the full cycle of exit, withdrawal and re-entry, so the process of retrieving ETH will take a long time. The withdrawn pledge amount will be gradually returned to the agreement based on the progress of the validator.
Both companies emphasized that the pledge arrangement is non-custodial and MetaMask does not hold withdrawal keys for clients 'pledged funds. Lido said that holders of stETH, its liquidity pledge token, do not need to take any action, pointing out that its decentralized node operator structure and temporary reserve funds of more than 6,750 stETH can serve as a buffer against disruptions.
The actual losses are limited and the industry impact is controllable
According to independent on-chain analysis (neither company has confirmed), the actual amount affected is small. Researcher Kaden pointed out that 19 MetaMask validators received block rewards, but 18 of those payments were routed to addresses funded through the Tornado Cash mixer rather than the correct fee recipients, totaling approximately 0.36 ETH, which is less than $1,000 at current prices.
同一分析显示，出于预防目的，约有 17,000 个验证器正在退出，这些验证器持有约 523,000 枚 ETH，价值约 14 亿美元，另有 821 个可能受影响的验证器尚未退出。该研究员表示，尚不清楚攻击者是否能更改整个集合的费用接收方，且他们“很可能从未具备”提取质押 ETH 的能力，但在理论上，根据签名访问权限获取方式的不同，验证器可能会被故意罚没（Slashed）。
Aave 创始人 Stani Kulechov 表示，借贷协议正在与 Lido 一同监控局势，Aave 市场未受到影响，而 stETH 是该平台上最广泛使用的抵押品形式之一。Ethena 创始人 Guy Young 表示，其 USDe 合成美元的 backing assets 目前不包含对 stETH 或其他任何流动性质押代币的直接敞口，并预计不会产生影响。
回顾：类似事件并非首次
这是一年多来大型 Lido 运营商发生的第二起此类事件。Kiln 曾在 2025 年 9 月退出所有以太坊验证器，当时其首席执行官称发现了基础设施可能遭到入侵的迹象。这一事件发生在 SwissBorg 涉及 Solana 的事件仅数天之后。
目前，两家公司均未透露具体哪些基础设施遭到入侵、如何入侵以及由谁入侵。全面调查正在进行中，后续更新承诺将会公布。
