GoKawiilMetaMask confirms staking reward theft, says wallets untouched
MetaMask disclosed that a September 30 infrastructure security incident involved a threat actor accessing systems storing recipient addresses, diverting roughly 0.385 ETH in execution-layer staking rewards. The company said staked principal, withdrawal keys, Secret Recovery Phrases and private keys were not compromised, and it has since secured the affected systems and is refunding impacted customers.
GoKawiil's interpretation of the reporting above, not reported fact.
The incident shows that even non-custodial wallet providers can have supporting infrastructure, like staking reward distribution systems, targeted separately from core wallet security, which could complicate how users assess risk. MetaMask's emphasis on the limited scope suggests an effort to reassure its large user base that fund custody mechanisms remain intact despite the breach.
- About 0.385 ETH in staking rewards was diverted in the breach, not users' staked principal.
- MetaMask says wallet infrastructure, private keys, and Secret Recovery Phrases were unaffected.
- Some customers faced withdrawal delays and missed rewards due to precautionary validator exits, with refunds being processed.
Ledger Nano X Hardware Wallet — With incidents like this highlighting the risks of infrastructure-side vulnerabilities, keeping your crypto assets in cold storage is a smart move. The Ledger Nano X lets you manage Ethereum and other assets offline, away from exchange or staking-service exposure, giving you full control of your private keys.
See Ledger Nano X Hardware Wallet on Amazon → Affiliate link — we may earn a commission on purchases, at no extra cost to you. Product picked by AI based on this article; it is not a tested recommendation.Source: bleepingcomputer.com, 2026-11-06
Published there as: “MetaMask says recent attack didn't affect wallet infrastructure”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.