Thehackernews MetaMask Responds to Security Incident Affecting Validators
Article Content
- •MetaMask is addressing a security incident affecting its infrastructure.
- •No immediate threat to MetaMask wallets has been identified.
- •Affected Ethereum validators are being exited as a precautionary measure.
MetaMask announced an ongoing security incident impacting part of its infrastructure on October 1, 2026. The company stated there is no immediate threat to MetaMask wallets. As a precaution, MetaMask is exiting affected Ethereum validators within its non-custodial staking operations. This decision was made in coordination with clients and partners, specifically mentioning Lido, a decentralized liquid staking solution for Ethereum. The exit process for relevant validators has begun, with completion expected by October 7, 2026. MetaMask has not disclosed additional details regarding the nature of the security issue. The company continues to monitor the situation and will provide updates as necessary.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (2)
Following this threat?
Track Lido in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
Are MetaMask wallets at risk?
What actions is MetaMask taking?
When will the exit of validators be completed?
Continue Reading
Critical Zero-Day Exploits Target F5 and Check Point Products F5 Networks released emergency hotfixes for a critical zero-day vulnerability, CVE-2026-94127, in its BIG-IP Access Policy Manager on September 22, 2026, after confirming active exploitation. This flaw allows unauthenticated remote code execution (RCE) and has a CVSS score of 9.8. Concurrently, Check Point disclosed…
Critical Citrix NetScaler Zero-Day Vulnerabilities Exploited Citrix disclosed two critical zero-day vulnerabilities, CVE-2026-88771 and CVE-2026-88772, affecting NetScaler ADC and Gateway systems, which are being actively exploited. Both vulnerabilities have a CVSS score of 9.5 and allow unauthenticated attackers to execute arbitrary commands remotely. CVE-2026-88771 arises…