MetaMask pulls 523,000 ETH from Ethereum validators after security breach

A security breach inside MetaMask’s staking infrastructure has forced the wallet provider to pull thousands of Ethereum validators, triggering the largest exit backlog on the network in nine months. The episode highlights how quickly a single operator’s problem can ripple into network-wide congestion under Ethereum’s proof-of-stake exit limits.

• Roughly 17,000 MetaMask-operated validators holding about 523,000 ETH were proactively exited after the breach.
• The attacker diverted fee rewards from 18 of 19 validators that proposed blocks but captured only about 0.36 ETH, researcher Kaden said.
• About 773,447 ETH is now waiting to exit Ethereum’s validator set, the most since December 2025.

• 523,000 ETH staked by MetaMask validators pulled offline after the breach
• 773,447 ETH total ETH queued to exit, the largest backlog since December
• 13d 10h current wait time to clear Ethereum’s validator exit queue
• 45 days estimated full exit-to-reentry timeline for MetaMask stake via Lido

MetaMask began exiting thousands of validators this week after discovering that part of its staking infrastructure had been compromised, according to reporting by CryptoSlate. The company has not disclosed the cause of the breach or confirmed independent figures on its scope, but said it was removing affected validators as a precaution while working with clients, partners and security advisers.

MetaMask said it has identified no immediate threat to user wallets. The firm noted in a post on X that its staking operation is non-custodial and that it does not control clients’ withdrawal keys.

Attacker diverted fee rewards from 18 of 19 validators, researcher says

Onchain security researcher Kaden said in a post on X that about 17,000 MetaMask-operated validators holding roughly 523,000 ETH were proactively exited. The move followed an analysis showing that transaction-fee rewards from 18 of 19 validators that proposed blocks had been redirected to an address funded through Tornado Cash, an Ethereum-based mixing protocol.

Despite the scope of the redirection, Kaden said the attacker appears to have captured only about 0.36 ETH. The far larger concern, he said, is how the attacker gained enough access to alter fee recipients, and whether that access extended to validator signing keys, which could trigger slashing.

Because MetaMask’s staking setup separates withdrawal keys from validator-level access, an attacker limited to fee-recipient control could not withdraw the underlying stake. That separation does not, however, rule out penalties if signing keys were compromised and misused to produce invalid or duplicate block proposals. Kaden said 821 potentially affected validators, including three whose fee rewards were allegedly diverted, had not yet exited as of his analysis, and it remains unclear why they are still active.

Exit queue hits 773,447 ETH, the most since December

The exodus of MetaMask validators has collided with Ethereum’s built-in limits on how fast stake can enter or leave the network. About 773,447 ETH was waiting to exit the validator set on Wednesday, according to Validator Queue data cited by CryptoSlate, implying a wait of roughly 13 days and 10 hours before an exiting validator clears the queue.

That backlog is the largest since December 2025 and exceeds the roughly 476,000 ETH that queued up during a previous surge in May. The churn rate, the maximum amount of stake Ethereum allows to move per epoch, stood at 256 ETH per epoch, with each epoch lasting about 6.4 minutes, forcing a large burst of exits to clear gradually rather than all at once.

A further withdrawal sweep delay was estimated at 7.6 days. That period begins after validators clear the exit queue and become withdrawable, as Ethereum cycles through eligible validators to transfer balances to designated addresses.

Lido estimates 45-day round trip for MetaMask-linked stake

MetaMask runs some of its validators through Lido, the liquid staking protocol, which said in a post on X that the full exit, withdrawal and eventual re-entry process for affected stake could take up to 45 days. Part of that delay stems from Ethereum’s entry queue, separate from the exit queue, which currently stands at 27 days for validators seeking to rejoin the network.

MetaMask has yet to say how many validators were affected in total, whether signing keys were exposed, or whether any slashing has occurred. The company’s own disclosures stop short of confirming the figures Kaden published.

The BlockWest read. For large wallet providers running validators at scale, this is a reminder that fee-recipient access and signing-key custody need separate, audited controls, not just withdrawal-key segregation. Staking desks and treasuries using MetaMask-linked infrastructure should expect their capital to be illiquid for weeks, not days, given the 45-day re-entry estimate, and should price that lockup risk into any staking allocation going forward.

MetaMask has not said when it will disclose the total number of affected validators or confirm whether any signing keys were compromised. Until it does, the 821 validators Kaden flagged as still active, including three tied to the alleged fee diversion, remain an open question for the roughly 27-day entry queue and 45-day re-entry timeline now facing MetaMask-linked stake.

BlockWest is a news publication. Nothing here is investment advice. Read our disclaimer and editorial policy.