The Rollup founder Andy commented on the MetaMask infrastructure security incident, stating that sources indicate that unless there are further significant negative reports, re-staking ETH may only see small-scale withdrawals. He advised taking proactive measures for all re-staked ETH positions exposed to Lido and expressed hope for a positive outcome, but emphasized that it is more prudent for the protocol and investors to act first; after multiple communications, no one has clearly explained what exactly happened.

The incident originated from MetaMask Staking (formerly Consensys Staking) conducting a preventive exit of its Ethereum validators operating in Lido after investigating an infrastructure breach. The company stated that no immediate threats were found on the wallet side, and staking is non-custodial, meaning it does not manage customer withdrawal keys. The Lido governance forum disclosed that the relevant validators have begun to exit, with the last batch expected to complete their exit by October 7, but not all have fully withdrawn; due to a long queue, the complete cycle of exiting, withdrawing, and re-entering is estimated to take up to 45 days.

stETH holders have been explicitly informed that no action is required. Exiting ETH will gradually return to the protocol as validators complete the process. Lido also warned that some rewards may be lost if validators go offline early to reduce network penalty risks, which could also incur downtime penalties. The protocol emphasized that node operators are collectively decentralized and pointed out that a temporary reserve of over 6,750 stETH is available for buffering.

There remains a gap in information. MetaMask has not clarified which layer of the system was breached, how the breach occurred, whether user data was leaked, nor disclosed the number of affected validators and potential penalties. SlowMist stated that such node issues typically do not harm the principal ETH but may affect staking returns. The founder of Aave noted that its market is operating normally, with no observed chain liquidations.

Similar precedents can be traced back to September 2025 when Kiln conducted preventive exits according to Lido's standard procedures after infrastructure alerts. In the re-staking chain, stETH is often used as underlying collateral for EigenLayer and other re-staking protocols; if node operator keys are compromised, the risks lie in penalties and downtime, not in wallet hot keys. ether.fi also issued a statement saying that earlier security incidents involving node operators did not affect weETH or user fund security, and are not the same entity as this round of MetaMask exits.

In market mechanics, sellers are the validator shares in the preventive exit queue, while buyers are protocols and positions that continue to use stETH as re-staking collateral. The flow of funds is from validators exiting → entering the withdrawal queue → re-staking back to the protocol after about 45 days, representing an event-driven operational contraction, not a spot sell-off. Beneficiaries are other Lido operators and reserve buffers not affected by the same infrastructure; those under pressure are re-staking positions based on stETH, reward flows dependent on that operator's block production, and leveraged users who must decide whether to reduce exposure amid incomplete information. Andy's description of "small-scale withdrawals" corresponds to proactive deleveraging at the re-staking layer, rather than Lido requiring token holders to redeem.

On a supplementary note: Lido remains the largest liquid staking protocol, having previously migrated over 8 million ETH, approximately $16 billion in scale, to the 0x02 validator after the Curated Module v2, with a single validator cap of 2,048 ETH, and requiring permitted operators to deposit ETH collateral to cover penalties. This round has not disclosed MetaMask's share in that collection, so the market impact remains at the level of reward interruption and queue congestion, rather than confirmed large-scale penalties.

Source: Public Information