Lido reports MetaMask Staking precautionary exits and proposes stopping new allocations

What happened

Lido disclosed precautionary exits of MetaMask Staking-operated validators after an infrastructure compromise. An October 5 update proposes stopping new deposits to that operator in CMv1 and CMv2.

What changed

Affected validators have begun exiting, creating potential foregone rewards and downtime penalties. The proposed allocation response would set targetLimit to zero with soft target mode for operator 21 in CMv1 and operator 6 in CMv2.

What did not change

The notice says stETH holders need take no action and MetaMask does not hold staking withdrawal keys. It does not establish loss of principal, execution of zero target limits, or completed recovery.

Confirmed

• The official notice reports an infrastructure compromise investigation and precautionary validator exits already begun.
• The notice expects final validator exits by October 7, distinct from full withdrawal.
• The October 5 update specifies zero soft target limits and contract calls for both curated modules.
• Those calls are proposed for the next on-chain vote.
• The notice states no action is required from stETH holders.

Still open

• Root cause, scope, and final investigation findings.
• Realized foregone rewards, downtime penalties, or any principal impairment.
• Whether all relevant validators exit by October 7.
• Execution of the proposed allocation limits.
• The notice's estimated return cycle of up to approximately 45 days; this is not evidence that the stETH withdrawal queue exceeds 30 days.

What it means for an advisor

• Review Lido's operator incident exposure, reward impact, and mitigation status before reaffirming the memo.
• Verify target-limit execution and validator exits, and separately monitor actual stETH withdrawal timing.
• Do not infer a fired 30-day withdrawal-queue trigger from an operator exit-and-reentry estimate.