MetaMask Security Breach Triggers Massive Ethereum Validator Exits
- Approximately 17,000 MetaMask-operated validators, holding about 523,000 ETH, were exited due to a security breach.
- An analysis revealed that transaction-fee rewards from most validators had been redirected to an address linked to Tornado Cash.
- The exit backlog for Ethereum validators has surged to a nine-month high, with around 773,447 ETH waiting to exit.
- The estimated wait time for exiting validators is currently over 13 days, with a further withdrawal sweep delay of approximately 7.6 days.
- Lido estimates the entire exit and re-entry process could take up to 45 days for affected validators.
The incident has raised concerns about the security of validator signing keys and how access was gained by the attacker. The backlog reflects Ethereum’s safeguards against rapid changes in its proof-of-stake consensus mechanism.
With over 773,447 ETH awaiting withdrawal, this situation marks the largest exit backlog since December, highlighting significant disruptions in Ethereum’s staking infrastructure.