.png){kind=logo}
MetaMask began exiting Ethereum validators after disclosing a security incident on September 30, 2026. For ETH staked through Lido, the funds are expected to return gradually to the protocol and enter staking again.
However, completing the withdrawal and restarting staking could take approximately 45 days, leaving affected validators without rewards during part of that period.
Leaving Ethereum’s validator network does not immediately release the staked ETH. Validators must complete their exit before the network processes their withdrawals. Lido expects the final affected validators to stop staking by October 7, although their funds may remain awaiting withdrawal after that date.
The ETH then follows the withdrawal arrangements already attached to each validator. MetaMask said its staking business does not manage clients’ withdrawal keys. For the affected Lido validators, the protocol expects the ETH to return through the exit, withdrawal, and re-entry process. These withdrawals do not automatically mean holders receive ETH in their personal wallets.
Lido estimates that the complete process could take up to approximately 45 days, largely because Ethereum has an extended queue for new validators. Once the ETH becomes available, putting it back into staking requires another deposit and a wait before validators can resume their duties.
Consequently, October 7 marks the expected completion of validator exits, rather than the return of all affected ETH to active staking. Funds will move through the process gradually. The affected validators will miss rewards while inactive, and operators could face downtime penalties if they stop performing their duties before their exits finish.
MetaMask said it was investigating the incident with external partners and security advisers. It described the validator exits as a precaution within its staking operations. “At this time, we have identified no immediate threat to MetaMask wallets,” the company said. Its statement did not explain how the affected infrastructure was compromised.
Separately, Ethereum security researcher Kaden estimated that payments from 18 of 19 examined MetaMask-operated validators went to an unexpected address. The diverted block-production payments totaled approximately 0.36 ETH. His analysis estimated that the precautionary exits covered around 17,000 validators holding roughly 523,000 ETH. MetaMask had not confirmed those figures when the reports appeared.
Block-production payments and the original stake have separate destinations. Redirecting those payments can therefore divert earnings without changing where Ethereum sends the staked coins after withdrawal.
However, control over validator signing credentials can create other risks, including penalties for approving conflicting records. Neither MetaMask nor Lido reported that such a penalty had occurred.
Lido said, “No action is required from stETH holders.” The token represents pooled ETH deposits and accumulated staking rewards. The validator exits therefore do not require holders to withdraw or exchange their tokens. Lido’s stated plan involves returning the affected ETH to staking after the withdrawal process finishes.
Meanwhile, the expected reward losses concern the validators leaving service. The final cost depends on how long they remain inactive and whether they incur downtime penalties before exiting. Lido’s timeline allows for the withdrawal and return of funds, while MetaMask continues investigating the infrastructure incident.
Also Read: Corporate Bitcoin Treasuries: Why Companies Hold BTC as an Asset
