MetaMask, the crypto wallet operated by Consensys, said on Wednesday it is responding to a security incident affecting part of its infrastructure and is exiting affected Ethereum staking validators on Lido as a precautionary measure.

The company has not disclosed the nature of the security issue. In its statement, MetaMask said it found no immediate threat to user wallets and is addressing the ongoing threat internally, with support from external partners and security advisors. The precautionary measures involve validators within its non-custodial staking operations.

Lido, the liquid staking protocol on Ethereum, separately confirmed that MetaMask Staking had begun exiting its Ethereum validators on the Lido protocol on Wednesday. The final affected validators are expected to complete their exits by the end of Oct. 7.

The exits carry operational costs. Lido warned that the precautionary validator exits could result in foregone staking rewards and possible downtime penalties.

Lido Finance developer Will Shannon provided the timeline for capital returning to the protocol. "ETH exited from MetaMask Staking-operated validators is expected to return to the protocol gradually as the relevant validators complete the exit, withdrawal, and re-entry cycle, which is estimated to take approximately up to 45 days due to the extended entry queue," Shannon said.

Operational Consequences

The 45-day estimate reflects Ethereum's current validator mechanics. Once a validator initiates an exit, it must pass through the protocol's exit queue before its stake becomes withdrawable. Re-staking that capital requires passing back through the entry queue, which has lengthened as validator activity on the network has increased. The extended cycle means staked ETH tied to MetaMask Staking's Lido operations will sit idle for weeks, generating no yield.

For Lido, the incident reduces the number of validators operated by one of its institutional node operators and temporarily shrinks the protocol's active validator set. For MetaMask, the decision to exit validators preemptively signals a defensive posture: the company opted to forgo staking revenue rather than risk operating compromised infrastructure, even while stating it found no immediate threat to wallets.

MetaMask's staking product is non-custodial, meaning the underlying ETH remains tied to the protocol rather than held in user wallet balances. The company's statement that wallets face no identified threat is consistent with the incident being confined to its staking infrastructure, though the precise scope remains undisclosed.

Cointelegraph reported that it reached out to MetaMask for comment but did not receive an immediate response.

The story is developing, and MetaMask has said it will share further information as its investigation progresses. The key dates to watch are the end of Oct. 7, when the final affected validators are expected to exit, and the roughly 45-day window Shannon cited for the exited ETH to cycle back into the protocol.