MetaMask Withdraws ETH From Lido After Infrastructure Security Incident

MetaMask Lido security incident — ConsenSys-owned wallet MetaMask has begun withdrawing all Ethereum it stakes through Lido Finance following a security incident involving its staking infrastructure.

The company stated it identified a “security incident” within its staking node infrastructure on September 30, 2026. While MetaMask said it found no immediate threat to user wallets or private keys, it decided to exit its Lido validators as a precautionary measure. The company emphasized that the incident was related to its own infrastructure, not a flaw in the Lido protocol itself.

The process of withdrawing the staked ETH is expected to take up to 45 days to complete, as it is subject to Ethereum’s standard validator exit queue. MetaMask did not disclose the total amount of ETH being withdrawn from Lido.

Users who stake ETH directly through MetaMask’s built-in staking service are affected by this action. The company advised users that they will not be able to stake new ETH or claim staking rewards through the service until the withdrawal process is finished and a new, secure infrastructure is established.