metamask

On November 5, MetaMask released a security incident update stating that on September 28, part of its infrastructure was accessed without authorization. The attacker modified the reward receiving addresses of some Ethereum validators, transferring approximately 0.385 ETH in staking rewards.MetaMask stated that the related issues were fixed on the same day, and all affected Ethereum validators have now completed their exit. This incident caused temporary delays in withdrawals for some customers and may have resulted in losses of staking rewards. MetaMask emphasized that there is currently no evidence that user wallets, private keys, or customer staking principal have been leaked or withdrawn without authorization.

Smart contract developer Justin Kalland posted on X, indicating that the Binance hacker may have made a potential mistake, and MetaMask should retain any Web2 logs it can access as much as possible. He stated that the hacker sent 175 million USDT to a new wallet, and about 2.5 minutes later, that wallet received 2 ETH, likely used to pay for gas fees, which aligns with the usage pattern of other attack wallets.Kalland noted that exactly two minutes later, the wallet used MetaMask's Gas Station service, even though there were already gas fees at that time. Three consecutive transactions appeared in the same block, including an ETH deposit from the Gas Station, an unlimited USDT authorization to the Kyber Network router, and a payment of 127.67 USDT to the Gas Station. The amount of this ETH deposit perfectly matched the maximum gas budget after combining the Kyber authorization and USDT payment, down to the wei.Kalland stated that the ETH held by the wallet at that time was sufficient to cover the aforementioned fees, reasonably inferring that the user was using the MetaMask wallet and mistakenly selected USDT to pay for gas fees due to haste. Using the MetaMask Gas Station requires going through MetaMask Sentinel, and the transaction is broadcasted by it rather than through conventional RPC, meaning that related interactions likely left off-chain records that may contain IP metadata. Among the checked attacker wallets, this is the only one that showed the use of the Gas Station, with the address 0xAa246BF639586a6Ba46762D378CE50cA4fc654a0.

MetaMask has set Stellar as the default network for mobile applications and browser extensions. Existing multi-chain accounts will receive Stellar addresses derived from their mnemonic phrases and will support XLM, USDC, and Soroban tokens.

The Ethereum staking withdrawal queue has retreated from last week's peak. After MetaMask began withdrawing validators, the withdrawal queue once climbed to about 851,000 ETH, and is currently down to about 767,000 ETH. Previously, on September 29, the queue was only about 166,000 ETH, growing more than five times in just a few days, reaching about 2% of the total staked ETH of approximately 43.6 million.On September 30, MetaMask disclosed a security incident affecting some of its infrastructure and took the affected validators offline as a precaution. Its update on October 1 stated that the investigation found no signs of impact on wallets or customer funds. In addition to its wallet services, MetaMask also operates validators for the staking service provider Lido. Ethereum security researcher Kaden estimates that this precautionary withdrawal involves about 17,000 validators and approximately 523,000 ETH, although MetaMask has not confirmed this data.Lido expects that as the affected validators withdraw and their balances are extracted, these ETH will gradually be restaked, a process that may take about 45 days. During the downtime, the affected validators will miss out on rewards, and Lido stated that stETH holders do not need to take any action. Meanwhile, the demand for entering the staking queue has cooled, with about 1.5 million ETH waiting to enter, and the estimated waiting time is about 25 days.

Revoke.cash issued a reminder that due to last week's Magic Eden security incident, Revoke.cash advises users to go to the Auto-Revoking module on their account page to check if there are yellow warning icons on each network; if so, they need to first restore that address to a regular account in other wallet applications, and then upgrade it to a smart account through MetaMask.In addition, users should confirm that all active networks are enabled and ensure that each wallet in the subscription is granted the relevant permissions individually. Revoke.cash added that Ultimate subscription users need to confirm that their wallets meet two conditions for the Auto-Revoking feature to properly protect assets: first, the Auto-Revoking permission must be granted for that wallet in MetaMask; second, the wallet must be upgraded to a MetaMask smart account on the corresponding network. Typically, the second step is automatically completed during the authorization process, but if the address has previously been upgraded to a smart account through other wallet applications, the upgrade may fail.

Linea's official statement indicates that some validators supporting the Yield Boost treasury are withdrawing as a precaution due to the MetaMask staking incident. Linea emphasizes that the funds and control of the staking treasury itself have not been affected.The impact of this incident is that during the period when relevant validators withdraw and are replaced by new validators, the net staking rewards that provide funding sources for ecosystem incentives will temporarily decrease. Linea stated that it is closely monitoring the situation's progress.

MetaMask has released a follow-up statement regarding the previously disclosed infrastructure security incidents, stating that the team is continuously conducting investigations and addressing the issues.MetaMask stated that to ensure user safety, it has collaborated with relevant partners to take preventive measures and is currently withdrawing the affected validator nodes from its non-custodial staking business. According to the investigation results so far, there is no indication that MetaMask wallets or customer funds have been affected.This morning, part of the infrastructure of MetaMask's non-custodial staking business encountered a security incident. As a precaution, the validators operating on Lido have begun to withdraw.

Renzo Finance responded to the MetaMask infrastructure security incident, stating that the risks and liquidity of its latest product, Renzo Basis, will not be concentrated in stablecoins or vaults and can be fully verified through on-chain data. Therefore, users do not need to rely on trust in Renzo to confirm that they are not affected by the incident.Renzo stated that ezETH will only be supported by native ETH starting from April 2026. Currently, there are only 214.75 stETH in the withdrawal queue (accounting for 0.5%) with valid claims.Previously, MetaMask indicated that it is handling a security incident affecting some infrastructure, and no immediate threat to MetaMask wallets has been identified. As a precaution, MetaMask is coordinating with customers, partners, and security consultants to proactively withdraw affected validators from its non-custodial staking business and will provide further updates in due course.

The liquidity staking protocol Lido announced that MetaMask Staking (formerly Consensys Staking) has taken precautionary measures to protect customer assets related to its Ethereum validators after investigating an infrastructure breach incident. The related measures include withdrawing its Ethereum validators from the Lido protocol, which may result in some loss of rewards. If the validators go offline recently to reduce potential network slashing risks, it may also incur downtime penalties.Lido stated that the related validators have begun to withdraw, with the last batch expected to complete the withdrawal by October 7, 2026, but full withdrawals may not be completed by then. stETH holders do not need to take any action. The ETH withdrawn from the validators operated by MetaMask Staking is expected to gradually return to the protocol during the cycle of the validators completing the withdrawal, withdrawing, and re-entering, with the estimated maximum duration of this process being about 45 days due to extended queuing times.Lido reminds that staking operations are non-custodial, and MetaMask does not manage withdrawal keys on behalf of customers. The diversified node operators of the Lido protocol and other security mechanisms, including a temporary reserve of over 6,750 stETH, are designed to control and mitigate disruptions to the normal operation of the protocol. A comprehensive investigation is ongoing, and further updates will be announced separately.

Aave founder Stani posted on the X platform, stating that the team is currently monitoring the progress of the MetaMask Staking infrastructure security incident in collaboration with Lido.Stani mentioned that the Aave market is currently unaffected, and all operations are running normally.

MetaMask announced a security update on platform X, stating that some of its infrastructure was affected by a security incident. Currently, there are no signs of a direct threat to the MetaMask wallet.MetaMask stated that as a precaution, the company is coordinating with relevant customers, partners, and security consultants to proactively withdraw affected validator nodes from its non-custodial staking business and will announce further developments at the appropriate time. MetaMask emphasized that this incident involves infrastructure and does not represent a current security risk to the MetaMask wallet.

Cointelegraph cited statements from Joe Lubin, co-founder of Ethereum and founder of Consensys, stating that MetaMask is evaluating the path to launch a native token, but there are currently no immediate plans to launch MASK.MetaMask is a cryptocurrency wallet developed by Consensys. Lubin mentioned that the team is still assessing related options and has not yet determined a timeline for a near-term release.

According to Decrypt, MetaMask announced the launch of a new wallet protection feature in its mobile app and browser extension, adding warnings for similar addresses, investment and pig-butchering scams, as well as first-time transfer recipients, and providing a clearer transaction confirmation page on mobile and browser extension.Another feature, Added Protection, will automatically roll back transactions that do not match the preview, first launching in the browser extension, with mobile support to follow.

MetaMask officially announced support for connecting to TRON decentralized applications, further opening up the multi-chain ecosystem entry. In the latest DApp Spotlight, several representative projects from the TRON ecosystem have been selected, covering three core areas: artificial intelligence, decentralized finance, and file storage, including the AI Agent infrastructure B.AI, the liquidity infrastructure platform SUN.io, the DeFi lending platform JustLend DAO, and the globally leading peer-to-peer file sharing protocol BitTorrent. Users can now conveniently access the above dApps through MetaMask, experiencing a one-stop service for AI, DeFi, and decentralized storage, among other multi-chain services. This integration not only enhances the openness and usability of the TRON ecosystem but also provides global users with a smoother multi-chain interaction experience, further improving the openness and usability of the TRON ecosystem.

According to Fortune magazine, Ethereum software company Consensys announced that it will spin off its flagship wallet MetaMask into an independent entity, with founder Joe Lubin serving as CEO. The original Consensys will be renamed to focus on institutional protocols and Ethereum software, led by longtime executive Mike Kriak. Lubin stated that the spin-off is due to the consumer business value accumulation of MetaMask far exceeding that of other business units.MetaMask has expanded from an Ethereum wallet to a platform similar to a new crypto bank, launching a "main account" feature that supports multiple assets and Mastercard debit card spending, and has diversified revenue sources such as perpetual contracts and prediction markets.Lubin did not disclose an IPO timeline, but analysts believe that MetaMask may seek to go public as early as early 2027, while also noting that the willingness to issue tokens has decreased under the current regulatory environment.

MetaMask launched the self-custody wallet Agent Wallet on Thursday, allowing AI agents to execute on-chain transactions within user-defined limits, aimed at traders and developers using AI agents to monitor the market, identify opportunities, and autonomously execute trades. Users can set spending limits, approve specific protocols, choose risk settings, and select different levels of automation between Guard Mode and Beast Mode.Agent Wallet supports Claude Code, Codex, Cursor, OpenClaw, Hermes, OpenCode, as well as Hyperliquid and Ethereum Virtual Machine compatible networks. Agent Wallet supports gas abstraction, allowing users to pay network fees with the assets being transferred, without needing to hold the corresponding native tokens of the network. MetaMask stated that supported transactions will undergo transaction simulation, threat scanning, and smart trading MEV protection, and if qualifying transactions incur losses after passing security checks, they can receive up to $10,000 in Transaction Protection coverage per month.

According to official news, MetaMask announced that Robinhood Chain is now live on MetaMask.

According to CoinDesk, the Genlayer Foundation, in collaboration with 27 companies including OKX, MetaMask, and Matter Labs, has launched the "Internet Court" protocol, aimed at providing a unified dispute resolution mechanism for payments, custody, and contract disputes between AI agents.The project seeks to address the current issues of fragmentation in payment, identity, and interoperability standards within AI business systems, providing a more suitable adjudication infrastructure for transactions between machines.

According to CoinDesk, MetaMask has announced the launch of a new self-custody account called "Money Account," which integrates stablecoin earnings, payment consumption, and trading functions into a single wallet system, further promoting its transformation into a comprehensive financial platform.This product is released by Consensys and built on the Monad blockchain, with the core asset being the USD-pegged stablecoin mUSD. Users can earn up to approximately 4% floating annual yield while holding assets, with funds automatically allocated to decentralized lending protocols such as Morpho, and Aave will be integrated later.Unlike traditional DeFi products, this account does not require manual transfers of funds between protocols; earnings automatically take effect after deposit and can be directly used for token exchanges, perpetual contracts, and prediction market trading functions.