MetaMask staking infrastructure breach diverted ~0.385 ETH in rewards; wallets and keys unaffected
MetaMask (developed by Consensys) said a security incident disclosed on September 30 did not affect MetaMask wallets or wallet infrastructure. In an update, it said a threat actor accessed systems used to store recipient addresses for its non-custodial staking operations. The actor diverted about 0.385 ETH of execution-layer staking rewards, which are separate from customers' staked ETH. MetaMask says it found no evidence that staked principal or withdrawal keys were compromised, and that Secret Recovery Phrases and private keys were not affected. The company exited affected validators as a precaution. Some customers saw temporary withdrawal delays and possibly missed staking rewards because of these exits. MetaMask is working with affected customers to refund the lost rewards.
Detalhes técnicos
- The attacker accessed systems that store recipient addresses and diverted some execution-layer staking rewards (bleepingcomputer.com).
- The article does not say how the attacker got in. It names no threat actor and gives no IOCs.
- The issue was identified and addressed the same day, and the affected systems have been secured, according to MetaMask.
Remediação
- MetaMask wallet users do not need to take any action.
- Customers with affected staking arrangements should follow guidance sent directly by MetaMask or their staking provider.
Linha do tempo
-
MetaMask staking infrastructure breach diverted ~0.385 ETH in rewards; wallets and keys unaffected
ler a análise desta fonte ocultar
MetaMask (developed by Consensys) said a security incident disclosed on September 30 did not affect MetaMask wallets or wallet infrastructure. In an update, it said a threat actor accessed systems used to store recipient addresses for its non-custodial staking operations. The actor diverted about 0.385 ETH of execution-layer staking rewards, which are separate from customers' staked ETH. MetaMask says it found no evidence that staked principal or withdrawal keys were compromised, and that Secret Recovery Phrases and private keys were not affected. The company exited affected validators as a precaution. Some customers saw temporary withdrawal delays and possibly missed staking rewards because of these exits. MetaMask is working with affected customers to refund the lost rewards.
Technical Details
- The attacker accessed systems that store recipient addresses and diverted some execution-layer staking rewards (bleepingcomputer.com).
- The article does not say how the attacker got in. It names no threat actor and gives no IOCs.
- The issue was identified and addressed the same day, and the affected systems have been secured, according to MetaMask.
Remediation
- MetaMask wallet users do not need to take any action.
- Customers with affected staking arrangements should follow guidance sent directly by MetaMask or their staking provider.