MetaMask security scare pushes Ethereum validator exits to a nine-month high

MetaMask is pulling thousands of Ethereum validators after a security breach redirected rewards, creating a network-wide backlog for stakers trying to exit.

Onchain security researcher Kaden said about 17,000 MetaMask-operated validators holding roughly 523,000 ETH were proactively exited after an analysis found that transaction-fee rewards from 18 of 19 validators that proposed blocks had been diverted to an address funded through Tornado Cash, an Ethereum-based privacy protocol that allows crypto transactions to be mixed and anonymized.

The attacker appears to have captured only about 0.36 ETH, according to Kaden. The bigger concern is how the attacker gained enough access to alter fee recipients and whether that access extended to validator signing keys, which could trigger slashable behavior.

MetaMask has not confirmed those figures or disclosed the cause of the incident. Instead, the company said that part of its infrastructure had been compromised and that it was exiting affected validators as a precaution while working with clients, partners and security advisers. It said it had identified no immediate threat to MetaMask wallets.

The company also said its staking operation is non-custodial and that it does not control clients' withdrawal keys. That separation would prevent an attacker with only validator-level access from withdrawing the underlying stake, but it would not eliminate the possibility of penalties if signing keys were compromised and misused.

Kaden said 821 potentially affected validators had not yet exited, including three among those whose fee rewards were allegedly diverted. It remains unclear why they are still active or whether the attacker retained access to change additional fee recipients.

MetaMask has yet to disclose how many validators were affected, whether signing keys were exposed or whether any slashing has occurred.

Ethereum’s withdrawal backlog spikes to 9-month high

Meanwhile, the security incident and the exits are already rippling through Ethereum's staking infrastructure.

About 773,447 ETH was waiting to leave the validator set on Wednesday, according to Validator Queue data, implying a 13-day, 10-hour wait before an exiting validator clears the queue. A further withdrawal sweep delay was estimated at 7.6 days.

That is the largest exit backlog since December 2025 and above the roughly 476,000 ETH waiting during a previous surge in May, according to Validator Queue's historical data.

The bottleneck reflects a safeguard built into Ethereum rather than an inability to process transactions.

Ethereum limits how quickly stake can enter or leave its validator set to prevent abrupt changes from destabilizing its proof-of-stake consensus. The Validator Queue showed a churn rate of 256 ETH per epoch, with each epoch lasting about 6.4 minutes. At that rate, a large burst of exits must be processed gradually rather than simultaneously.

The additional 7.6-day sweep period begins after validators clear the exit queue and become withdrawable. Ethereum then cycles through eligible validators and transfers balances to their designated withdrawal addresses.

For MetaMask-linked stake, the disruption could last longer still. Lido, where MetaMask operates validators, estimates the full exit, withdrawal, and eventual re-entry process could take up to 45 days, partly because validators returning to Ethereum must also contend with a lengthy entry queue that is currently 27 days long.