MetaMask says attack did not compromise wallet infrastructure

Cryptocurrency wallet provider MetaMask says a security incident did not compromise its wallets or wallet infrastructure. The company said an attacker accessed systems used to store recipient addresses and diverted some execution-layer staking rewards.

MetaMask said it identified and addressed the issue on the same day. About 0.385 ETH in rewards was diverted, separate from customers’ staked ETH. The company said it found no evidence that customers’ staked principal, withdrawal keys, Secret Recovery Phrases or private keys were compromised, and said it secured the affected systems.

The incident was first disclosed on September 30, when MetaMask said it was investigating an “ongoing infrastructure security incident” and had exited affected validators in its non-custodial staking operations. Validators are Ethereum network nodes that propose blocks, verify transactions and help maintain the blockchain.

MetaMask said precautionary validator exits caused temporary withdrawal delays for some customers and may have led to missed staking rewards while validators exited or awaited reactivation. The company said it is working with affected customers and partners to address outstanding effects and refund lost rewards. It said wallet users do not need to take action, while affected staking customers should follow guidance from MetaMask or their staking provider.