Cryptocurrency wallet provider MetaMask said a recent security incident has not affected MetaMask wallets or its wallet infrastructure.
The MetaMask non-custodial crypto wallet (developed by blockchain software company Consensys) lets users store and manage assets on the Ethereum network and compatible blockchains.
MetaMask revealed on September 30 that it was investigating an “ongoing infrastructure security incident” and exited affected validators (Ethereum network nodes responsible for proposing blocks, verifying crypto transactions, and maintaining Ethereum blockchain security) within non-custodial staking operations.
While the company shared almost no details at the time and redirected BleepingComputer to the public statement when asked what part of its infrastructure was affected, in a Thursday update it said that a threat actor gained access to systems used to store recipient addresses and diverted some execution-layer staking rewards.
“The issue was identified and addressed on the same day, and approximately 0.385 ETH in rewards was diverted. These rewards are separate from customers’ staked ETH,” MetaMask said. “We have found no evidence that customers’ staked principal or withdrawal keys were compromised, and the affected systems have been secured.”
It also added that the attack did not compromise MetaMask users’ Secret Recovery Phrases or private keys and that it was working with affected customers to refund the lost rewards.
“Some customers have experienced temporary withdrawal delays as a result of the precautionary validator exits. The process may also have resulted in missed staking rewards while validators were exiting or awaiting reactivation. We are working directly with affected customers and partners to address any outstanding impact,” MetaMask noted.
“MetaMask wallet users do not need to take any action as a result of this incident. Customers whose staking arrangements were affected should follow any guidance provided directly by MetaMask or their staking provider.”
Last month, Ledger also asked Asian resellers and distributors to halt wallet sales and remove products from shelves while it was investigating multiple hardware implant incidents.
More recently, crypto exchange Binance confirmed that North Korean hackers stole $6.34 billion after compromising its wallet infrastructure by tricking an employee into installing malware in a fake job interview.
Adaptive Security’s AI agents analyze email intent, context, and behavior to uncover phishing, business email compromise, and invoice fraud.
See what’s getting through with a 14-day read-only scan of Microsoft 365 or Google Workspace, with no MX changes.
Start your free email security scan.
