Skip to content
Blockchain Posts

infrastructure

MetaMask Staking exits Lido validators on infrastructure compromise

MetaMask disclosed an infrastructure incident Sept 30 and is exiting all its ETH validators from Lido by Oct 7, ~45-day return cycle. Sentora Morpho vaults shed ~$136M PYUSD/RLUSD.

by 4 min read
infrastructureexploitethereummetamasklido

MetaMask disclosed a security incident on part of its infrastructure on September 30, 2026 and said it is "proactively exiting affected validators within our non-custodial staking operations." Hours later, Lido's research forum confirmed the move: all of MetaMask Staking's ETH validators (the former Consensys Staking operator set) will be out-of-order-exited by end of October 7, 2026, with ETH re-entering the staking queue over roughly 45 days due to the current entry backlog. In the hours after disclosure, Morpho Vaults V2 curated by Sentora on Ethereum shed roughly $136M in combined PYUSD and RLUSD deposits — not because any Sentora or Morpho contract was touched, but because depositors moved first and asked later.

What happened

MetaMask's public note is short: an "ongoing security incident affecting part of our infrastructure," "no immediate threat to MetaMask wallets," and the precautionary validator exits. It does not describe the vector, the compromised systems, or whether customer data was accessed. The company stresses that MetaMask Staking is non-custodial — MetaMask has never held withdrawal keys, so the exit path is Ethereum's normal validator exit, not a key rotation.

Lido's disclosure, posted on the research forum by community admin KimonSh at 23:40 UTC on September 30, confirms the operator set is MetaMask Staking (ex-Consensys Staking) and labels the action an out-of-order precautionary exit: validators go to the back of Ethereum's exit queue immediately rather than being rotated gradually. Final MetaMask exits should finish by end of October 7, after which the ETH re-enters Lido via the entry queue — a ~45-day round trip at current queue depth.

Neither MetaMask nor Lido has published a validator count or an ETH figure for the exited set. Cointelegraph has cited an aggregate "over $3B in staked ETH" across MetaMask Staking's broader book; that is not the precise amount leaving Lido today.

The Morpho side effect

The incident is not the only Ethereum-side story. Sentora — the second-largest Morpho curator by TVL, managing more than $1.1B across Morpho Vaults V2 — saw sharp withdrawals from the two largest vaults in the hours after disclosure. Per The Defiant:

  • RLUSD Main vault: ~$426.4M → ~$350.4M in roughly four hours.
  • PYUSD Main vault: ~$408.9M → ~$349.3M in the same window.
  • Immediately accessible liquidity at the time of The Defiant's snapshot: $8.46M on RLUSD, $2.38M on PYUSD.

No source has reported a technical connection between the vaults and MetaMask's compromise. The link is operational: Sentora's team overlaps with MetaMask's staking surface, and depositors treated incident disclosure plus "part of our infrastructure" as a signal to de-risk until MetaMask names what was hit.

Numbers

- Disclosure                  : MetaMask, 2026-09-30
- Lido forum post             : 2026-09-30 23:40 UTC
- Operator                    : MetaMask Staking (ex-Consensys Staking) in Lido NO set
- Final validator exit (est.) : 2026-10-07, end of day
- ETH return cycle            : ~45 days (exit queue + entry queue)
- Validator count exited      : not disclosed
- ETH amount in exit set      : not disclosed
- Sentora Morpho Vaults V2 TVL: >$1.1B pre-event
- RLUSD vault drop            : $426.4M → $350.4M (~4h window)
- PYUSD vault drop            : $408.9M → $349.3M (same window)
- Accessible liquidity        : $8.46M (RLUSD), $2.38M (PYUSD)

What to watch

  1. MetaMask's naming of the compromise. The brief user update does not describe what was accessed — infra credentials, source control, a build pipeline, a sidecar service. What MetaMask names next sets the blast radius for extension users, hardware-wallet integrations, and Snap authors.
  2. stETH peg behavior. No source reports a peg move so far, but a sudden exit of a large operator set is the exact stress case stETH's secondary market tests. Monitor the stETH/ETH Curve pool and the Lido reserve ratio across the next 45 days.
  3. Downtime penalties and foregone rewards. Lido's post flags both as possible outcomes of the out-of-order exit, offset against operator SLAs. The eventual public post-mortem should include the realized penalty figure.
  4. Return of liquidity to Sentora vaults. If MetaMask's follow-up disclosure cleanly separates MetaMask Staking from the broader Sentora curator surface, PYUSD/RLUSD liquidity should return quickly; if not, Sentora will need to publish its own operational isolation statement.

Context — the second precautionary exit of this operator set

The Lido forum carries a prior "Kiln precautionary out of order exits" disclosure from 2024, and an older July 2023 Consensys/Kiln event accidentally exited 125 validators. Both predate the MetaMask Staking rebrand of the same operator. The pattern on Ethereum's exit queue — operator exits a large tranche of validators after an infrastructure signal, protocol absorbs the cost — is now a documented play, and in both prior cases Lido's node operator framework handled it without stETH stress. Whether that remains true at this scale and under current entry-queue depth is the open question for the next six weeks.

Sources

Related stories