MetaMask discloses unauthorized access to infrastructure, only a small amount of staking rewards transferred

BlockBeats news, on November 6, MetaMask released a security incident update on November 5 stating that on September 28, part of its infrastructure experienced unauthorized access. Attackers modified the reward receiving addresses of some Ethereum validators, transferring about 0.385 ETH in staking rewards.

MetaMask stated that the related issue was fixed on the same day, and all affected Ethereum validators have now completed their exit. This incident caused temporary withdrawal delays for some customers and may have resulted in loss of staking rewards. MetaMask emphasized that there is currently no evidence that user wallets, private keys, or customer staked principal were leaked or withdrawn without authorization.