GoKawiilMetaMask confirms staking reward theft, says wallets untouched
MetaMask disclosed that a September 30 infrastructure security incident involved a threat actor accessing systems storing recipient addresses, diverting roughly 0.385 ETH in execution-layer staking rewards. The company said staked principal, withdrawal keys, Secret Recovery Phrases and private keys were not compromised, and it has since secured the affected systems and is refunding impacted customers.