MetaMask reported a minor security incident

[LuckyCrypto777]

MetaMask reported a minor security incident.
The issue affected part of the company's infrastructure. No immediate threats to MetaMask wallets have been identified at this time.
As a precaution, MetaMask has begun removing affected validators from non-custodial staking.

Days without a security incident in the crypto world: 1 0

https://x.com/MetaMask/status/2105442300335620460

[Oshosondy]

What can happen is that hackers can compromise validators' keys, but it will be difficult to compromise the coins that people staked. I guess this is what that happened.

If it is possible that people coins can be compromised, it would have happened. But anyone that can be able to compromise the coins will need to have access to people's individual private key which is difficult for the hackers to achieve.

[FinneysTrueVision]

Metamask has not given any specific details yet which led to some speculation that it could have been really bad. From the recent on-chain activity, investigators are saying that only 0.36 ETH in staking rewards was stolen by an attacker who managed to change the address where rewards are sent to. It will be a huge relief if that is the extent of the damage, although it’s yet another incident that might make people lose confidence in DeFi. Even with something as low risk as staking, users will be scared of losing funds.

[LuckyCrypto777]

Metamask has not given any specific details yet which led to some speculation that it could have been really bad. From the recent on-chain activity, investigators are saying that only 0.36 ETH in staking rewards was stolen by an attacker who managed to change the address where rewards are sent to. It will be a huge relief if that is the extent of the damage, although it’s yet another incident that might make people lose confidence in DeFi. Even with something as low risk as staking, users will be scared of losing funds.

.

I was hoping for this too, but I came across information in X that real users' wallets had been hacked:



Attacker drained: ETH, BNB, usdt, usdc...

[FinneysTrueVision]

I was hoping for this too, but I came across information in X that real users' wallets had been hacked:



Attacker drained: ETH, BNB, usdt, usdc...

That’s likely unrelated to the staking incident. The staking rewards thief used a fresh wallet with only one transaction receiving ETH from Tornado Cash, whereas in this user’s situation, the drainer is using a wallet that has a lot of activity since last year.

With how popular Metamask is, you’re going to have frequent hacks directly targeting users. An infrastructure compromise is far more rare. It wouldn’t come as a surprise if it was a sophisticated actor, like Lazarus Group or somebody using AI to find an exploit.