Secret

SwissBorg

Ethereum

MetaMask has reiterated that it has not found any indications that user wallets and customer funds faced any imminent threats in its latest security update, confirming that it is still focusing on “containment and verification” steps.
In the meantime, MetaMask continued the precautionary removal of its Ethereum validators from the Lido staking protocol.
<h3 id="span-style-font-weight-400-metamask-no-immediate-threat-to-wallets-span">Metamask: No immediate threat to wallets</h3>
While the <a href="https://metamask.io/news/user-update" rel="noopener noreferrer nofollow">follow-up update</a> did not go into detail about the security incident, MetaMask insisted that it had not seen any indication that customer funds had been accessed, based on its investigations up to October 1.
MetaMask’s staking is non-custodial, so it does not hold any withdrawal keys for the staking it runs on behalf of clients.
In the meantime, MetaMask Staking (formerly Consensys Staking), which operates validators inside the largest Ethereum liquid staking protocol, Lido, has been pulling its validators offline.
Lido did not specify the exploit either. However, a <a href="https://research.lido.fi/t/security-disclosure-metamask-staking-precautionary-out-of-order-exits/11961" rel="noopener noreferrer nofollow">governance forum post</a> assured stETH holders that no action was required on their part.
Affected validators are already on the exit queue, with the last expected to be out, though not fully withdrawn, by the end of October 7. Returning those withdrawn Ethereum into validator positions will take at least another 27 days and 18 hours, per the<a href="https://www.validatorqueue.com/" rel="noopener noreferrer nofollow">Ethereum validator queue</a>.
<h3 id="span-style-font-weight-400-a-first-stress-test-for-a-newly-independent-metamask-span">A first stress test for a newly independent MetaMask</h3>
MetaMask is barely three weeks removed from becoming a <a href="https://metamask.io/news/metamask-next-chapter" rel="noopener noreferrer nofollow">September 9 announcement</a> confirming the split into the consumer wallet business, MetaMask, and the protocols and institutional arm, Consensys.
<a href="https://www.cryptopolitan.com/consensys-rebrands-main-company-as-metamask/" rel="noopener noreferrer nofollow">Cryptopolitan reported</a> at the time that the separation is set to finalize by year’s end.
MetaMask has positioned itself as the world’s largest self-custodial financial platform, downloaded more than 100 million times in about 190 countries and trillions of dollars in cumulative transaction volume.
In September 2025, staking platform Kiln also went through its own “<a href="https://research.lido.fi/t/security-disclosure-kiln-precautionary-out-of-order-exits-in-response-security-incident/10654" rel="noopener noreferrer nofollow">orderly exit</a>” from Ethereum validators after an API it provided was exploited in the roughly $40 million SwissBorg breach.
Like MetaMask now, Kiln also insisted that client assets were secure.
MetaMask has not said whether the validators it runs outside Lido are caught up in the current incident, and neither it nor Lido has detailed the nature of the compromise. The company says it will share more verified information as it becomes available.
In the meantime, MetaMask reminded users not to share their Secret Recovery Phrase or private keys with anyone, and urged caution not to go along with any communications that did not come directly from its official channels.
The smartest crypto minds already read our newsletter. Want in? <a href="https://www.cryptopolitan.com/newsletters/?utm_source=cp&amp;utm_medium=web&amp;utm_campaign=inlineAds" rel="noopener noreferrer nofollow">Join them</a>.

MetaMask remains in containment as first test as independent company enters second day

Table of Contents

Cryptopolitan_News

Other articles published on Oct 1, 2026

Join our free newsletter for daily crypto updates!