Incident BriefingsMetaMask staking-infrastructure incident

MetaMask staking-infrastructure incident

MetaMask disclosed a security incident affecting part of its infrastructure.

Last modified

Summary

  • Environment: Infrastructure supporting non-custodial staking
  • Operational impact: Precautionary validator exits
  • Financial impact: No incident cost established in the reviewed evidence
  • Record status: Developing record. Reviewed October 7, 2026; updated as evidence emerges.

What happened

MetaMask disclosed a security incident affecting part of its infrastructure. [1]

Impact

It initiated precautionary exits of affected staking validators. [1]

As of October 1, MetaMask reported no indication of affected wallets or customer funds. [1]

Timeline

  1. Public disclosure

    Infrastructure incident announced.

    [1]

  2. Investigation update

    MetaMask published a user update.

    [1]

  3. Briefing updated

    This briefing was last reviewed and updated on October 7, 2026.

Threat Group & Attack Vector

The reviewed disclosure does not establish the initial access method.

Actors

  • No threat actor group has been identified in the reviewed public evidence.

TTPs

  • No specific MITRE ATT&CK technique is currently mapped for this case.

Response

Containment and verification continued with partners and security advisers. [1]