# MetaMask infrastructure incident prompts Lido operator exits

> Affected stake enters an exit, withdrawal, and re-entry cycle with possible missed rewards and downtime penalties.

- URL: https://riadefi.com/on-chain/2026-09-30-lido-metamask-staking-infrastructure-incident-kjgcgwf/
- Type: Security incident
- Stage: Confirmed
- Evidence: developing
- Materiality: material
- Event date: 2026-09-30
- Version: 1, published 2026-10-05 (first published 2026-10-05)
- Follow-up: 2026-10-08
- Advisor-relevant: yes
- Affects: Lido (protocol)

Developing. Some claims here are not yet confirmed; they are listed apart from the confirmed facts. A new version replaces this one when the primary evidence changes.

## What happened

An operator infrastructure incident prompted precautionary exits of MetaMask-operated Lido validators.

## What changed

Affected stake enters an exit, withdrawal, and re-entry cycle with possible missed rewards and downtime penalties.

## What did not change

The notices do not establish compromised withdrawal keys or a core-protocol exploit.

## Confirmed

- Lido confirms that affected validators began exiting.
- MetaMask says it does not manage clients' staking withdrawal keys.
- An October 5 Lido reply proposes zero deposit targets in both curated modules; execution is not established.

## Still open

- Attack scope, realised penalties, and completed remediation.
- Actual completion dates and approval of the proposed deposit limits.
- The estimated 45-day operator cycle does not establish a stETH withdrawal queue exceeding 30 days.

## What it means for an advisor

- Review operator concentration, reward impairment, and exit assumptions in the Lido memo.
- Track remediation and deposit-limit execution before concluding recovery.

## Sources

1. [[Security Disclosure] MetaMask Staking Precautionary Out of Order Exits](https://research.lido.fi/t/security-disclosure-metamask-staking-precautionary-out-of-order-exits/11961) · Lido protocol contributors / Lido governance · 2026-09-30
2. [User update](https://metamask.io/news/user-update) · MetaMask · 2026-09-30


---

Published by Ketju Research on RIADeFi (https://riadefi.com). Educational research for financial professionals; not investment, legal, tax, or compliance advice.