{ "version": 1, "event_id": "evt_8fca4d5c4b0173a2", "url": "https://xiyu.news/events/evt_8fca4d5c4b0173a2/", "json": "https://xiyu.news/api/events/evt_8fca4d5c4b0173a2.json", "type": "security_incident", "status": "developing", "category": "crypto", "title": { "zh": "MetaMask基础设施安全事件导致以太坊验证者退出队列创2026年新高", "en": "MetaMask Infrastructure Security Incident: Proactive Exit of Affected Validators" }, "current_state": { "zh": "以太坊质押退出队列已攀升至2026年高点，约有80万枚ETH排队等待提取，表明验证者解除质押需求上升，退出等待时间正在延长。", "en": "Ethereum's staking exit queue has climbed to a 2026 high with roughly 800,000 ETH queued for withdrawal, pointing to elevated validator unstaking demand and a lengthening wait to exit." }, "first_seen_at": "2026-10-01T00:03:16.761779+00:00", "last_updated_at": "2026-10-05T11:44:16.147873+00:00", "last_material_change_at": "2026-10-05T11:44:16.147873+00:00", "confidence": 0.75, "updates_count": 12, "sources_count": 23, "entities": [ "aave", "affected", "affects", "after", "amid", "analysis", "basis", "boost", "compromise", "customer", "eth", "ethereum-staking", "exit", "exits", "funds", "here", "high", "hits", "immediate", "incident", "indication", "infrastructure", "joseph", "lido", "linea", "lubin", "metamask", "morpho", "nearly", "news", "part", "queue", "renzo", "says", "security-incident", "sentora", "staking", "threat", "unaffected", "validators", "vault", "waiting", "wallets", "were", "with", "withdraw", "yield" ], "identifiers": [], "topics": [ "aave", "consensys", "eth", "ethereum-staking", "ethereum-validators", "infrastructure", "lido", "linea", "liquid-staking", "metamask", "morpho", "on-chain-analysis", "on-chain-data", "renzo", "security-breach", "security-incident", "slashing-risk", "staking", "tornado-cash", "validator-exit-queue", "validator-keys", "validators", "vault-outflows", "withdrawal-queue" ], "updates": [ { "update_id": "upd_d99f47994c0dc787", "event_id": "evt_8fca4d5c4b0173a2", "occurred_at": "2026-09-30T23:52:39Z", "published_at": "2026-09-30T23:52:39Z", "first_seen_at": "2026-10-01T00:03:16.761779Z", "time_precision": "published", "update_type": "initial", "material_change": true, "title_zh": "MetaMask：安全事件影响部分基础设施，暂无直接威胁", "title_en": "MetaMask: Security Incident Affects Part of Infrastructure, No Immediate Threat", "what_changed_zh": "MetaMask披露了一起影响其部分基础设施的安全事件，并正主动将受影响的验证者从其非托管质押业务中退出，同时表示尚未发现钱包面临直接威胁。", "what_changed_en": "MetaMask disclosed a security incident affecting part of its infrastructure and is proactively exiting affected validators from its non-custodial staking operations, stating no immediate threat to wallets has been identified.", "current_state_zh": "MetaMask披露了一起影响其部分基础设施的安全事件，并正主动将受影响的验证者从其非托管质押业务中退出，同时表示尚未发现钱包面临直接威胁。", "current_state_en": "MetaMask disclosed a security incident affecting part of its infrastructure and is proactively exiting affected validators from its non-custodial staking operations, stating no immediate threat to wallets has been identified.", "detailed_summary_zh": "MetaMask disclosed a security incident affecting part of its infrastructure and is proactively exiting affected validators from its non-custodial staking operations, stating no immediate threat to wallets has been identified.", "detailed_summary_en": "MetaMask disclosed a security incident affecting part of its infrastructure and is proactively exiting affected validators from its non-custodial staking operations, stating no immediate threat to wallets has been identified.", "background_zh": "", "background_en": "", "community_discussion_zh": "", "community_discussion_en": "", "market_impact_zh": "", "market_impact_en": "", "importance_score": 7.5, "references": [], "confidence": 0.75, "story_ids": [ "telegram:wublockchainenglish:26231", "telegram:theblockbeats:198509", "telegram:theblockbeats:198612", "telegram:foresightnews:119551", "rss:decrypt.co_feed:9d6053e3b66b6ebe" ], "sources": [ { "url": "https://wublockchain.xyz/news/news-21058", "label": "wublockchainenglish", "source_type": "telegram", "official": false }, { "url": "https://m.theblockbeats.info/flash/369827?from=telegram", "label": "theblockbeats", "source_type": "telegram", "official": false }, { "url": "https://m.theblockbeats.info/flash/369933?from=telegram", "label": "theblockbeats", "source_type": "telegram", "official": false }, { "url": "https://foresightnews.pro/news/h5Detail/114381", "label": "foresightnews", "source_type": "telegram", "official": false }, { "url": "https://decrypt.co/379800/metamask-exits-lido-validators-amid-infrastructure-security-incident", "label": "Decrypt", "source_type": "rss", "official": false } ] }, { "update_id": "upd_4d1f48756556a816", "event_id": "evt_8fca4d5c4b0173a2", "occurred_at": "2026-09-30T23:57:02Z", "published_at": "2026-09-30T23:57:02Z", "first_seen_at": "2026-10-01T00:03:18.016656Z", "time_precision": "published", "update_type": "response", "material_change": true, "title_zh": "Aave创始人：密切关注MetaMask质押事件，Aave市场未受影响", "title_en": "Aave创始人：密切关注MetaMask质押事件，Aave市场未受影响", "what_changed_zh": "Aave创始人Stani表示，其团队正与Lido一同监控MetaMask Staking基础设施安全事件，并确认Aave市场未受影响，所有操作正常运行。", "what_changed_en": "Aave founder Stani said his team is monitoring the MetaMask Staking infrastructure security incident alongside Lido, confirming that Aave markets are unaffected and all operations are running normally.", "current_state_zh": "Aave创始人Stani表示，其团队正与Lido一同监控MetaMask Staking基础设施安全事件，并确认Aave市场未受影响，所有操作正常运行。", "current_state_en": "Aave founder Stani said his team is monitoring the MetaMask Staking infrastructure security incident alongside Lido, confirming that Aave markets are unaffected and all operations are running normally.", "detailed_summary_zh": "Aave founder Stani said his team is monitoring the MetaMask Staking infrastructure security incident alongside Lido, confirming that Aave markets are unaffected and all operations are running normally.", "detailed_summary_en": "Aave founder Stani said his team is monitoring the MetaMask Staking infrastructure security incident alongside Lido, confirming that Aave markets are unaffected and all operations are running normally.", "background_zh": "Tornado Cash 是运行在以太坊上的开源、非托管隐私协议，通过混合交易来模糊资金的来源与去向，已被美国财政部制裁。此次事件与 Kiln 此前的案例相似：Kiln 在 SOL 质押业务中损失 4,100 万美元后，退出了全部活跃 ETH 验证者并轮换签名密钥，将相关操作视为\"可能已被攻破\"。今年 7 月，Drop Site News 报道称，MetaMask 的开发方 ConsenSys 曾误聘一名与朝鲜有关联的软件开发者担任约一个月的顾问，但该报道并未表示这一任职与受影响的质押业务有关。", "background_en": "Tornado Cash is an open-source, non-custodial privacy protocol on Ethereum that mixes transactions to obscure their origin and destination, and it has been sanctioned by the U.S. Treasury. The incident resembles a prior case in which Kiln suffered a $41 million loss in its SOL staking operations and responded by exiting all active ETH validators and rotating signing keys, treating related operations as potentially compromised. In July, Drop Site News reported that ConsenSys, MetaMask's developer, accidentally hired a software developer linked to North Korea as a consultant for about a month, though that report does not suggest the role was related to the affected staking operations.", "community_discussion_zh": "", "community_discussion_en": "", "market_impact_zh": "此次退出使约 523,000 枚 ETH 进入以太坊质押提款通道，将退出队列推高至 773,447 ETH——为 2025 年 12 月以来最大积压——并推迟了这些资金的解锁时间；Lido 预计这些 ETH 将在\"退出、提款、再存入\"周期后重新质押，该周期估计最长约 45 天。风险传导渠道主要经由质押基础设施和流动性质押供应，而非现货托管，因此后续关于签名密钥是否泄露或是否发生罚没的披露，将影响市场对非托管质押服务商的情绪。", "market_impact_en": "The exits move roughly 523,000 ETH through Ethereum's staking withdrawal pipeline, swelling the exit queue to 773,447 ETH — its largest backlog since December 2025 — and delaying when those funds become liquid, while Lido expects the ETH to be re-deposited after an exit, withdrawal and re-entry cycle estimated at up to 45 days. The channel of exposure runs through staking infrastructure and liquid-staking supply rather than spot custody, so further disclosure on signing-key exposure or slashing would shape sentiment toward non-custodial staking providers.", "importance_score": 8.0, "references": [ { "url": "https://info.etherscan.com/what-is-fee-recipient/", "title": "Fee Recipient | Etherscan Information Center" }, { "url": "https://en.wikipedia.org/wiki/Tornado_Cash", "title": "Tornado Cash - Wikipedia" }, { "url": "https://support.metamask.io/trade/earn/stake/how-do-i-stake-with-metamask-staking/", "title": "How to stake with MetaMask Staking | MetaMask Help Center" }, { "url": "https://www.cryptotimes.io/2026/10/02/linea-exits-yield-boost-validators-after-metamask-security-incident-says-vault-funds-unaffected/", "title": "Linea Exits Yield Boost Validators After MetaMask Security Incident..." }, { "url": "https://www.gate.com/news/detail/linea-yield-boost-validators-partially-exit-following-metamask-staking-24707763", "title": "Linea Yield Boost Validators Partially Exit Following... | Gate News" }, { "url": "https://www.cryptotimes.io/2026/10/01/metamask-security-incident-staking-exits-lido-ethereum-validators-no-wallet-threat/", "title": "MetaMask Security Incident: Staking Exits Lido Ethereum ..." } ], "confidence": 0.75, "story_ids": [ "telegram:theblockbeats:198510", "google_news:article:43e9341e4ce450c7", "telegram:theblockbeats:198548", "rss:protos.com_feed_:a631b91f33d5a28e", "google_news:article:ca589be939eb6178" ], "sources": [ { "url": "https://m.theblockbeats.info/flash/369828?from=telegram", "label": "theblockbeats", "source_type": "telegram", "official": false }, { "url": "https://cryptobriefing.com/sentora-morpho-vaults-outflows-metamask-incident/", "label": "Crypto Briefing", "source_type": "google_news", "official": false }, { "url": "https://m.theblockbeats.info/flash/369866?from=telegram", "label": "theblockbeats", "source_type": "telegram", "official": false }, { "url": "https://protos.com/metamask-unstakes-1-4b-of-eth-after-validator-rewards-stolen/", "label": "Protos", "source_type": "rss", "official": false }, { "url": "https://www.cryptotimes.io/2026/10/02/linea-exits-yield-boost-validators-after-metamask-security-incident-says-vault-funds-unaffected/", "label": "The Crypto Times", "source_type": "google_news", "official": false } ] }, { "update_id": "upd_41c08591077f9720", "event_id": "evt_8fca4d5c4b0173a2", "occurred_at": "2026-10-01T00:00:43Z", "published_at": "2026-10-01T00:00:43Z", "first_seen_at": "2026-10-01T00:03:22.397862Z", "time_precision": "published", "update_type": "response", "material_change": true, "title_zh": "MetaMask质押业务在基础设施遭入侵后退出Lido验证者", "title_en": "MetaMask Staking Exits Lido Validators After Infrastructure Compromise", "what_changed_zh": "MetaMask Staking 已开始退出其 Lido 验证者，Lido 估计退出、提取和重新进入周期可能长达约 45 天；Aave 创始人表示其市场运行正常。", "what_changed_en": "MetaMask Staking has begun exiting its Lido validators, with Lido estimating an up-to-45-day exit, withdrawal and re-entry cycle; Aave's founder says its markets are operating normally.", "current_state_zh": "MetaMask 披露了一起影响部分基础设施的安全事件，并正在退出受影响的非托管质押验证者；MetaMask Staking 已开始退出其 Lido 验证者，Lido 估计相关周期可能长达约 45 天，Aave 创始人表示其市场运行正常。", "current_state_en": "MetaMask disclosed a security incident affecting part of its infrastructure and is exiting affected validators from its non-custodial staking operations; MetaMask Staking has begun exiting its Lido validators, with Lido estimating the cycle could take up to about 45 days, while Aave's founder says its markets are operating normally.", "detailed_summary_zh": "MetaMask Staking has begun exiting its Lido validators after an infrastructure compromise, with Lido estimating an up-to-45-day exit, withdrawal and re-entry cycle while Aave's founder reports its markets are operating normally.", "detailed_summary_en": "MetaMask Staking has begun exiting its Lido validators after an infrastructure compromise, with Lido estimating an up-to-45-day exit, withdrawal and re-entry cycle while Aave's founder reports its markets are operating normally.", "background_zh": "", "background_en": "", "community_discussion_zh": "", "community_discussion_en": "", "market_impact_zh": "", "market_impact_en": "", "importance_score": 8.0, "references": [], "confidence": 0.9, "story_ids": [ "rss:thedefiant.io_api_feed:24be6122a7cf55ad", "telegram:theblockbeats:198552", "google_news:article:f1d22557ff83a92f" ], "sources": [ { "url": "https://thedefiant.io/news/security/metamask-staking-exits-lido-validators-after-infrastructure-compromise", "label": "The Defiant", "source_type": "rss", "official": false }, { "url": "https://m.theblockbeats.info/flash/369870?from=telegram", "label": "theblockbeats", "source_type": "telegram", "official": false }, { "url": "https://www.binance.com/en-TR/square/post/372435515955471", "label": "Binance", "source_type": "google_news", "official": false } ] }, { "update_id": "upd_b6d36c648af577d0", "event_id": "evt_8fca4d5c4b0173a2", "occurred_at": "2026-10-01T00:15:55Z", "published_at": "2026-10-01T00:15:55Z", "first_seen_at": "2026-10-01T02:21:00.775876Z", "time_precision": "published", "update_type": "response", "material_change": true, "title_zh": "MetaMask因未披露的安全事件退出以太坊验证者行列", "title_en": "MetaMask exits Ethereum validators amid undisclosed security incident", "what_changed_zh": "MetaMask正在调查一起影响其基础设施的安全事件，并作为预防措施退出其运营的以太坊质押验证者；Lido确认验证者退出并提示可能产生罚没；最后一批受影响验证者预计10月7日前退出，提款再进入周期估计最长45天。", "what_changed_en": "MetaMask is investigating a security incident affecting its infrastructure and is exiting its operated Ethereum staking validators as a precaution; Lido confirmed the validator exits and flagged potential penalties; the last affected validators are expected to exit by Oct. 7, with withdrawal and re-entry cycle estimated up to 45 days.", "current_state_zh": "MetaMask正在调查一起未披露的安全事件，并退出其运营的以太坊质押验证者作为预防措施；Lido确认验证者退出并提示可能罚没，Aave市场此前确认未受影响。", "current_state_en": "MetaMask is investigating an undisclosed security incident affecting its infrastructure and is exiting its operated Ethereum staking validators as a precaution; Lido confirmed the validator exits and flagged potential penalties, while Aave markets remain unaffected per the founder's earlier statement.", "detailed_summary_zh": "MetaMask is investigating an undisclosed security incident affecting its infrastructure and is exiting its operated Ethereum staking validators as a precaution, with Lido confirming the validator exits and flagging potential penalties.", "detailed_summary_en": "MetaMask is investigating an undisclosed security incident affecting its infrastructure and is exiting its operated Ethereum staking validators as a precaution, with Lido confirming the validator exits and flagging potential penalties.", "background_zh": "", "background_en": "", "community_discussion_zh": "", "community_discussion_en": "", "market_impact_zh": "", "market_impact_en": "", "importance_score": 7.5, "references": [], "confidence": 0.95, "story_ids": [ "rss:cointelegraph.com_rss:dd4cc96383ddfbc9" ], "sources": [ { "url": "https://cointelegraph.com/news/metamask-exits-lido-validators-as-it-investigates-security-incident?utm_source=rss_feed&utm_medium=rss&utm_campaign=rss_partner_inbound", "label": "Cointelegraph", "source_type": "rss", "official": false } ] }, { "update_id": "upd_111196485a5d53b5", "event_id": "evt_8fca4d5c4b0173a2", "occurred_at": "2026-10-01T07:06:30Z", "published_at": "2026-10-01T07:06:30Z", "first_seen_at": "2026-10-01T10:31:15.339105Z", "time_precision": "published", "update_type": "escalation", "material_change": true, "title_zh": "MetaMask安全事件迫使以太坊质押退出，资金无风险", "title_en": "MetaMask security incident forces Ethereum staking exits, no funds at risk", "what_changed_zh": "新增研究员估算：约0.36 ETH区块生产收益被转移，约17,000个验证者、约523,000 ETH正在退出，MetaMask尚未确认；Lido称最后一批预计10月7日前停止质押，stETH持有者无需行动。", "what_changed_en": "New researcher estimates: about 0.36 ETH in block-production payments was diverted and roughly 17,000 validators holding about 523,000 ETH are being withdrawn, though MetaMask has not confirmed those figures; Lido said the last validators are expected to stop staking by Oct. 7 and stETH holders need not act.", "current_state_zh": "MetaMask披露影响部分基础设施的安全事件，并已关闭和退出受影响以太坊验证者；研究员估计约0.36 ETH区块生产收益被转移、约17,000个验证者/523,000 ETH受影响但未获MetaMask确认；Lido称退出和重新进入周期可能长达约45天，最后一批预计10月7日前停止质押，stETH持有者无需行动；MetaMask称未发现对钱包的直接威胁。", "current_state_en": "MetaMask disclosed a security incident affecting part of its infrastructure and has shut down and is exiting affected Ethereum validators; a researcher estimated about 0.36 ETH in block-production payments was diverted and roughly 17,000 validators holding about 523,000 ETH were affected, though MetaMask has not confirmed those figures; Lido said the exit and re-entry cycle could take up to about 45 days, with the last validators expected to stop staking by Oct. 7 and no action needed from stETH holders; MetaMask says it has identified no immediate threat to wallets.", "detailed_summary_zh": "MetaMask has shut down and is exiting affected Ethereum validators after a security incident that diverted an estimated 0.36 ETH in block-production payments, with roughly 523,000 ETH of stake withdrawn and Lido warning of lost rewards during an exit and re-entry process of up to 45 days.", "detailed_summary_en": "MetaMask has shut down and is exiting affected Ethereum validators after a security incident that diverted an estimated 0.36 ETH in block-production payments, with roughly 523,000 ETH of stake withdrawn and Lido warning of lost rewards during an exit and re-entry process of up to 45 days.", "background_zh": "", "background_en": "", "community_discussion_zh": "", "community_discussion_en": "", "market_impact_zh": "", "market_impact_en": "", "importance_score": 7.5, "references": [], "confidence": 0.95, "story_ids": [ "rss:www.coindesk.com_arc_outboundfeeds_rss_:a573b69a1b70b831" ], "sources": [ { "url": "https://www.coindesk.com/tech/2026/10/01/metamask-security-incident-forces-ethereum-staking-exits-with-lido-warning-of-lost-rewards", "label": "CoinDesk", "source_type": "rss", "official": false } ] }, { "update_id": "upd_8f9a5f35264c492a", "event_id": "evt_8fca4d5c4b0173a2", "occurred_at": "2026-10-01T08:03:18Z", "published_at": "2026-10-01T08:03:18Z", "first_seen_at": "2026-10-01T10:31:13.861270Z", "time_precision": "published", "update_type": "escalation", "material_change": true, "title_zh": "【MetaMask 安全事件攻击者盗取了原属于验证者激励的 0.36 ETH】", "title_en": "【MetaMask 安全事件攻击者盗取了原属于验证者激励的 0.36 ETH】", "what_changed_zh": "链上研究者 Kaden 指出，受影响验证者中 19 个验证者获得区块奖励，其中 18 笔奖励未发送至原定 fee recipient，而是流向一个由 Tornado Cash 资金支持的地址，攻击者实际获取奖励约 0.36 ETH；MetaMask 已预防性退出约 1.7 万个验证者，涉及约 52.3 万枚 ETH。", "what_changed_en": "On-chain researcher Kaden said that out of 19 validators receiving block rewards in the affected group, 18 rewards were not sent to the intended fee recipient but instead went to an address funded by Tornado Cash, with the attacker actually obtaining about 0.36 ETH; MetaMask has preemptively exited roughly 17,000 validators holding about 523,000 ETH.", "current_state_zh": "MetaMask披露影响部分基础设施的安全事件，并已关闭和退出受影响以太坊验证者；链上研究者 Kaden 的进一步分析显示，19 个验证者获得区块奖励中 18 笔未发送至原定 fee recipient，而是流向一个由 Tornado Cash 资金支持的地址，攻击者实际获取约 0.36 ETH；MetaMask 已预防性退出约 1.7 万个验证者，涉及约 52.3 万枚 ETH；此前 Lido 称退出和重新进入周期可能长达约 45 天，最后一批预计 10 月 7 日前停止质押，stETH 持有者无需行动；MetaMask 称未发现对钱包的直接威胁。", "current_state_en": "MetaMask disclosed a security incident affecting part of its infrastructure and has shut down and is exiting affected Ethereum validators; further analysis by on-chain researcher Kaden indicates that out of 19 validators receiving block rewards, 18 rewards were not sent to the intended fee recipient and instead went to an address funded by Tornado Cash, with the attacker actually obtaining about 0.36 ETH; MetaMask has preemptively exited roughly 17,000 validators holding about 523,000 ETH; Lido previously said the exit and re-entry cycle could take up to about 45 days, with the last validators expected to stop staking by Oct. 7 and no action needed from stETH holders; MetaMask says it has identified no immediate threat to wallets.", "detailed_summary_zh": "On-chain analysis of the MetaMask security incident shows an attacker diverted about 0.36 ETH of validator block rewards to a Tornado Cash-funded address, while MetaMask preemptively exited roughly 17,000 validators holding some 523,000 ETH.", "detailed_summary_en": "On-chain analysis of the MetaMask security incident shows an attacker diverted about 0.36 ETH of validator block rewards to a Tornado Cash-funded address, while MetaMask preemptively exited roughly 17,000 validators holding some 523,000 ETH.", "background_zh": "", "background_en": "", "community_discussion_zh": "", "community_discussion_en": "", "market_impact_zh": "", "market_impact_en": "", "importance_score": 7.0, "references": [], "confidence": 0.92, "story_ids": [ "telegram:foresightnews:119570" ], "sources": [ { "url": "https://foresightnews.pro/news/h5Detail/114400", "label": "foresightnews", "source_type": "telegram", "official": false } ] }, { "update_id": "upd_da21aa8206a28b68", "event_id": "evt_8fca4d5c4b0173a2", "occurred_at": "2026-10-01T08:04:10Z", "published_at": "2026-10-01T08:04:10Z", "first_seen_at": "2026-10-01T10:31:11.623399Z", "time_precision": "published", "update_type": "escalation", "material_change": true, "title_zh": "分析：质押安全事件后，MetaMask 退出 17,000 个验证者", "title_en": "Analysis: MetaMask Exits 17,000 Validators After Staking Security Incident", "what_changed_zh": "新增：约821个可能受影响的验证者仍处于活跃状态，受损的验证者签名密钥可能带来残余罚没（slashing）风险；MetaMask表示其质押服务为非托管且不控制用户提款密钥。", "what_changed_en": "New: about 821 potentially affected validators remain active, and compromised validator signing keys could pose residual slashing risk; MetaMask said its staking service is non-custodial and it does not control users' withdrawal keys.", "current_state_zh": "MetaMask披露影响部分基础设施的安全事件，并已关闭和退出受影响以太坊验证者；链上研究者 Kaden 的进一步分析显示，19 个验证者获得区块奖励中 18 笔未发送至原定 fee recipient，而是流向一个由 Tornado Cash 资金支持的地址，攻击者实际获取约 0.36 ETH；MetaMask 已预防性退出约 1.7 万个验证者，涉及约 52.3 万枚 ETH；新增信息显示约 821 个可能受影响的验证者仍活跃，受损签名密钥可能带来残余罚没风险；MetaMask 称其质押服务为非托管且不控制用户提款密钥；Lido 此前称退出和重新进入周期可能长达约 45 天，最后一批预计 10 月 7 日前停止质押，stETH 持有者无需行动。", "current_state_en": "MetaMask disclosed a security incident affecting part of its infrastructure and has shut down and is exiting affected Ethereum validators; further analysis by on-chain researcher Kaden indicates that out of 19 validators receiving block rewards, 18 rewards were not sent to the intended fee recipient and instead went to an address funded by Tornado Cash, with the attacker actually obtaining about 0.36 ETH; MetaMask has preemptively exited roughly 17,000 validators holding about 523,000 ETH; new information indicates about 821 potentially affected validators remain active, and compromised signing keys could pose residual slashing risk; MetaMask said its staking service is non-custodial and it does not control users' withdrawal keys; Lido previously said the exit and re-entry cycle could take up to about 45 days, with the last validators expected to stop staking by Oct. 7 and no action needed from stETH holders.", "detailed_summary_zh": "MetaMask has begun proactively exiting about 17,000 staking validators (~523,000 ETH) after a security incident in which an attacker diverted 18 block rewards to a Tornado Cash-funded address for roughly 0.36 ETH, with ~821 potentially affected validators still active and compromised signing keys posing residual slashing risk.", "detailed_summary_en": "MetaMask has begun proactively exiting about 17,000 staking validators (~523,000 ETH) after a security incident in which an attacker diverted 18 block rewards to a Tornado Cash-funded address for roughly 0.36 ETH, with ~821 potentially affected validators still active and compromised signing keys posing residual slashing risk.", "background_zh": "", "background_en": "", "community_discussion_zh": "", "community_discussion_en": "", "market_impact_zh": "", "market_impact_en": "", "importance_score": 7.5, "references": [], "confidence": 0.92, "story_ids": [ "telegram:wublockchainenglish:26241" ], "sources": [ { "url": "https://wublockchain.xyz/news/metamask-exits-17000-validators-after-staking-incident-21069", "label": "wublockchainenglish", "source_type": "telegram", "official": false } ] }, { "update_id": "upd_808490379440d270", "event_id": "evt_8fca4d5c4b0173a2", "occurred_at": "2026-10-01T08:07:02Z", "published_at": "2026-10-01T08:07:02Z", "first_seen_at": "2026-10-01T10:31:14.210395Z", "time_precision": "published", "update_type": "escalation", "material_change": true, "title_zh": "分析师：疑似19个MetaMask验证者遭攻击，攻击者仅窃取约0.36 ETH奖励", "title_en": "分析师：疑似19个MetaMask验证者遭攻击，攻击者仅窃取约0.36 ETH奖励", "what_changed_zh": "链上分析师报告约19个MetaMask验证者疑似遭攻击，奖励费用被转入Tornado Cash资助的地址；约1.7万个验证者主动退出，涉及约52.3万枚ETH，但攻击者实际窃取奖励仅约0.36 ETH；仍有部分疑似受影响验证者未退出。", "what_changed_en": "On-chain analyst reports about 19 MetaMask validators appear compromised with reward fees diverted to a Tornado Cash-funded address; roughly 17,000 validators (~523k ETH) voluntarily exited, though only ~0.36 ETH was actually stolen; some suspected affected validators remain unexited.", "current_state_zh": "MetaMask质押安全事件持续调查中；链上分析显示约19个验证者可能受影响，约1.7万个验证者主动退出，攻击者实际窃取约0.36 ETH，尚有部分疑似受影响验证者未退出。", "current_state_en": "MetaMask staking security incident remains under investigation; on-chain analysis indicates about 19 validators may be affected, roughly 17,000 validators voluntarily exited, stolen rewards total about 0.36 ETH, and some suspected affected validators have not yet exited.", "detailed_summary_zh": "An on-chain analyst reports that about 19 MetaMask validators appear to have been compromised with reward fees diverted to a Tornado Cash-funded address, prompting roughly 17,000 validators (~523k ETH) to voluntarily exit even though only ~0.36 ETH was actually stolen.", "detailed_summary_en": "An on-chain analyst reports that about 19 MetaMask validators appear to have been compromised with reward fees diverted to a Tornado Cash-funded address, prompting roughly 17,000 validators (~523k ETH) to voluntarily exit even though only ~0.36 ETH was actually stolen.", "background_zh": "", "background_en": "", "community_discussion_zh": "", "community_discussion_en": "", "market_impact_zh": "", "market_impact_en": "", "importance_score": 7.0, "references": [], "confidence": 0.95, "story_ids": [ "telegram:theblockbeats:198589" ], "sources": [ { "url": "https://m.theblockbeats.info/flash/369907?from=telegram", "label": "theblockbeats", "source_type": "telegram", "official": false } ] }, { "update_id": "upd_6dcfcab6379c7cad", "event_id": "evt_8fca4d5c4b0173a2", "occurred_at": "2026-10-01T13:40:02Z", "published_at": "2026-10-01T13:40:02Z", "first_seen_at": "2026-10-01T15:11:13.917628Z", "time_precision": "published", "update_type": "escalation", "material_change": true, "title_zh": "MetaMask 安全恐慌推动以太坊验证者退出量升至九个月高点", "title_en": "MetaMask security scare pushes Ethereum validator exits to a nine-month high", "what_changed_zh": "以太坊验证者退出队列升至 773,447 ETH，为 2025 年 12 月以来最大积压，等待约 13 天 10 小时外加约 7.6 天 sweep；进入队列约 27 天。", "what_changed_en": "Ethereum’s validator exit queue reached 773,447 ETH, the largest backlog since December 2025, implying about a 13-day 10-hour exit wait plus a 7.6-day sweep; the entry queue is about 27 days.", "current_state_zh": "MetaMask 披露影响部分基础设施的安全事件，并正预防性退出约 1.7 万个验证者，涉及约 52.3 万枚 ETH；链上研究者 Kaden 称 19 个获得区块奖励的验证者中 18 笔奖励未发送至原定 fee recipient，而是流向由 Tornado Cash 资金支持的地址，攻击者实际获取约 0.36 ETH；约 821 个可能受影响的验证者仍未退出，受损签名密钥可能带来残余罚没风险；MetaMask 称其质押服务为非托管且不控制用户提款密钥，但未披露事件原因、受影响范围或签名密钥是否暴露；新增信息显示以太坊验证者退出队列因此升至 773,447 ETH，为 2025 年 12 月以来最大积压，等待约 13 天 10 小时外加约 7.6 天 sweep，进入队列约 27 天；Lido 此前称退出、提取和重新进入周期可能长达约 45 天。", "current_state_en": "MetaMask disclosed a security incident affecting part of its infrastructure and is preemptively exiting roughly 17,000 validators holding about 523,000 ETH; on-chain researcher Kaden said that out of 19 validators receiving block rewards, 18 rewards were not sent to the intended fee recipient and instead went to an address funded by Tornado Cash, with the attacker actually obtaining about 0.36 ETH; about 821 potentially affected validators have not yet exited, and compromised signing keys could pose residual slashing risk; MetaMask said its staking service is non-custodial and it does not control users’ withdrawal keys, but has not disclosed the cause, full scope, or whether signing keys were exposed; new information shows Ethereum’s validator exit queue swelled to 773,447 ETH, the largest backlog since December 2025, implying about a 13-day 10-hour exit wait plus a 7.6-day sweep, with an entry queue of about 27 days; Lido previously said the full exit, withdrawal and re-entry cycle could take up to about 45 days.", "detailed_summary_zh": "MetaMask is exiting roughly 17,000 validators (~523,000 ETH) after an on-chain analysis found block-proposal fee rewards diverted to a Tornado Cash-funded address, swelling Ethereum's validator exit queue to a nine-month high of 773,447 ETH while the scope of the breach and slashing risk remain undisclosed.", "detailed_summary_en": "MetaMask is exiting roughly 17,000 validators (~523,000 ETH) after an on-chain analysis found block-proposal fee rewards diverted to a Tornado Cash-funded address, swelling Ethereum's validator exit queue to a nine-month high of 773,447 ETH while the scope of the breach and slashing risk remain undisclosed.", "background_zh": "", "background_en": "", "community_discussion_zh": "", "community_discussion_en": "", "market_impact_zh": "", "market_impact_en": "", "importance_score": 8.0, "references": [], "confidence": 0.94, "story_ids": [ "rss:cryptoslate.com_feed_:f2f6e67408bb3e14" ], "sources": [ { "url": "https://cryptoslate.com/metamask-security-scare-pushes-ethereum-validator-exits-to-a-nine-month-high/", "label": "CryptoSlate", "source_type": "rss", "official": false } ] }, { "update_id": "upd_7c95ac09b35b25e4", "event_id": "evt_8fca4d5c4b0173a2", "occurred_at": "2026-10-03T00:36:38Z", "published_at": "2026-10-03T00:36:38Z", "first_seen_at": "2026-10-03T02:17:04.262527Z", "time_precision": "published", "update_type": "response", "material_change": true, "title_zh": "Joseph Lubin：没有迹象表明MetaMask钱包或客户资金受到影响", "title_en": "Joseph Lubin: No Indication MetaMask Wallets or Customer Funds Were Affected by", "what_changed_zh": "Consensys 创始人 Joseph Lubin 首次公开回应称，没有迹象显示 MetaMask 钱包或客户资金受到该基础设施安全事件影响；作为预防措施，团队与合作伙伴已轮换验证者密钥，并强调验证者密钥与提款密钥分离，团队不持有客户提款密钥，可防止未经授权的质押 ETH 转移。", "what_changed_en": "Consensys founder Joseph Lubin publicly responded for the first time, saying there is no indication that MetaMask wallets or customer funds were affected by the infrastructure security incident; as a precaution, his team and partners rotated validator keys, and he emphasized that validator and withdrawal keys are separate and the team does not hold clients' withdrawal keys, preventing unauthorized transfers of staked ETH.", "current_state_zh": "Consensys 创始人 Joseph Lubin 公开表示，MetaMask 钱包和客户资金未受该基础设施安全事件影响，相关方已预防性轮换验证者密钥，且提款密钥由客户独立持有，因此未发生未经授权的质押 ETH 转移。", "current_state_en": "Consensys founder Joseph Lubin publicly stated that MetaMask wallets and customer funds were not affected by the infrastructure security incident; validator keys have been rotated as a precaution, and withdrawal keys remain separately held by clients, so no unauthorized transfers of staked ETH occurred.", "detailed_summary_zh": "Consensys founder Joseph Lubin said a security incident hit part of the company's infrastructure but that no MetaMask wallets or customer funds appear affected, with validator keys rotated as a precaution and withdrawal keys held separately to prevent unauthorized staked-ETH transfers.", "detailed_summary_en": "Consensys founder Joseph Lubin said a security incident hit part of the company's infrastructure but that no MetaMask wallets or customer funds appear affected, with validator keys rotated as a precaution and withdrawal keys held separately to prevent unauthorized staked-ETH transfers.", "background_zh": "以太坊质押将验证者的签名密钥与控制质押 ETH 的提款密钥分开，因此轮换签名密钥本身并不会转移资金。由于更换验证者密钥意味着旧验证者退出、新验证者启用，运营方须经过以太坊的验证者退出与进入队列。", "background_en": "Ethereum staking separates a validator's signing key from the withdrawal key that controls the staked ETH, so rotating signing keys does not by itself move funds. Because a validator key change means the existing validator is retired and a new one activated, the operator must go through Ethereum's validator exit and entry queues.", "community_discussion_zh": "", "community_discussion_en": "", "market_impact_zh": "该事件局限于 Consensys 运营的质押基础设施，而非用户托管环节，因此对市场的直接传导渠道在于以太坊验证者运营：轮换密钥会使相关验证者经历退出与进入队列，可能影响队列等待时间与质押流向。钱包层面的影响主要限于自托管工具的市场情绪，因为 Lubin 表示用户密钥与资产未被涉及。", "market_impact_en": "The incident is confined to Consensys-operated staking infrastructure rather than user custody, so the direct channel to markets runs through Ethereum validator operations: rotating keys sends affected validators through the exit and entry queues, which can shift queue waits and staking flows. Wallet-side exposure is limited to sentiment around self-custody tools, since Lubin said user keys and assets were not involved.", "importance_score": 7.5, "references": [ { "url": "https://hackernoon.com/eip-7002-a-better-way-to-stake-on-ethereum", "title": "EIP-7002: A Better Way To Stake On Ethereum | HackerNoon" }, { "url": "https://www.validatorqueue.com/", "title": "A dashboard showing the Ethereum validator enter and exit queue..." }, { "url": "https://ethereum.org/staking/dvt/", "title": "Distributed validator technology | ethereum.org" } ], "confidence": 0.92, "story_ids": [ "telegram:wublockchainenglish:26268", "telegram:foresightnews:119660" ], "sources": [ { "url": "https://wublockchain.xyz/news/joseph-lubin-metamask-wallets-customer-funds-unaffected-security-incident-21096", "label": "wublockchainenglish", "source_type": "telegram", "official": false }, { "url": "https://foresightnews.pro/news/h5Detail/114491", "label": "foresightnews", "source_type": "telegram", "official": false } ] }, { "update_id": "upd_6148a4f1bec27d10", "event_id": "evt_8fca4d5c4b0173a2", "occurred_at": "2026-10-05T06:40:29Z", "published_at": "2026-10-05T06:40:29Z", "first_seen_at": "2026-10-05T10:21:06.444492Z", "time_precision": "published", "update_type": "aftermath", "material_change": true, "title_zh": "以太坊投资者被困在为期两周的质押退出队列中。原因如下。", "title_en": "Ethereum investors are stuck in a two-week staking exit line. Here's why.", "what_changed_zh": "以太坊验证者退出队列在 MetaMask 预防性退出验证者后升至 2026 年最长：10 月 2 日约 851,000 ETH，10 月 5 日仍有约 786,000 ETH 排队，等待约 14 天；Lido 预计受影响 ETH 将逐步重新质押，整个过程可能长达约 45 天，最后一批受影响的 MetaMask 验证者预计在 10 月 7 日前停止质押。同时进入质押队列降至约 150 万 ETH、等待约 25 天，较 9 月初约 200 万 ETH/35 天降温。", "what_changed_en": "Ethereum’s validator exit queue became the longest of 2026 after MetaMask’s precautionary validator exits: about 851,000 ETH on Oct. 2, with about 786,000 ETH still queued on Oct. 5 and an estimated nearly 14-day wait; Lido expects the affected ETH to be gradually restaked over a process that could take up to about 45 days, with the last affected MetaMask validators expected to stop staking by Oct. 7. The entry queue separately fell to about 1.5 million ETH/25 days, down from about 2 million ETH/35 days in early September.", "current_state_zh": "MetaMask 基础设施安全事件引发的预防性验证者退出已把以太坊退出队列推高至 2026 年峰值约 851,000 ETH（10 月 2 日），10 月 5 日仍有约 786,000 ETH 排队，等待接近 14 天；Lido 预计相关 ETH 将逐步重新质押，过程可能长达约 45 天，最后一批受影响 MetaMask 验证者预计 10 月 7 日前退出质押。MetaMask 表示未发现钱包或客户资金受影响，客户提款密钥不受其控制。", "current_state_en": "The precautionary validator exits tied to MetaMask’s infrastructure security incident pushed Ethereum’s exit queue to a 2026 peak of about 851,000 ETH on Oct. 2; about 786,000 ETH remained queued on Oct. 5 with an estimated wait of nearly 14 days. Lido expects the affected ETH to be gradually restaked over a process that could take up to about 45 days, with the last affected MetaMask validators expected to stop staking by Oct. 7. MetaMask said it found no indication wallets or customer funds were affected, and client withdrawal keys remain outside its control.", "detailed_summary_zh": "Ethereum's validator exit queue reached its longest of 2026 with about 786,000 ETH (~$2 billion) awaiting withdrawal and a nearly 14-day wait, after MetaMask began pulling validators as a precaution following a security incident, while entry queues fell over a quarter since early September.", "detailed_summary_en": "Ethereum's validator exit queue reached its longest of 2026 with about 786,000 ETH (~$2 billion) awaiting withdrawal and a nearly 14-day wait, after MetaMask began pulling validators as a precaution following a security incident, while entry queues fell over a quarter since early September.", "background_zh": "", "background_en": "", "community_discussion_zh": "", "community_discussion_en": "", "market_impact_zh": "", "market_impact_en": "", "importance_score": 7.0, "references": [], "confidence": 0.94, "story_ids": [ "rss:www.coindesk.com_arc_outboundfeeds_rss_:0020f06829596c3c" ], "sources": [ { "url": "https://www.coindesk.com/tech/2026/10/05/ethereum-has-a-25-day-wait-to-start-staking-with-nearly-1-5-million-eth-in-line", "label": "CoinDesk", "source_type": "rss", "official": false } ] }, { "update_id": "upd_9ac127963f48c343", "event_id": "evt_8fca4d5c4b0173a2", "occurred_at": "2026-10-05T09:03:05Z", "published_at": "2026-10-05T09:03:05Z", "first_seen_at": "2026-10-05T11:44:16.147873Z", "time_precision": "published", "update_type": "escalation", "material_change": true, "title_zh": "以太坊新闻 | 以太坊质押退出队列创2026年新高，近80万枚ETH等待提取", "title_en": "Ethereum News | Ethereum Staking Exit Queue Hits 2026 High With Nearly 800K ETH Waiting to Withdraw", "what_changed_zh": "以太坊质押退出队列已攀升至2026年高点，约有80万枚ETH排队等待提取，表明验证者解除质押需求上升，退出等待时间正在延长。", "what_changed_en": "Ethereum's staking exit queue has climbed to a 2026 high with roughly 800,000 ETH queued for withdrawal, pointing to elevated validator unstaking demand and a lengthening wait to exit.", "current_state_zh": "以太坊质押退出队列已攀升至2026年高点，约有80万枚ETH排队等待提取，表明验证者解除质押需求上升，退出等待时间正在延长。", "current_state_en": "Ethereum's staking exit queue has climbed to a 2026 high with roughly 800,000 ETH queued for withdrawal, pointing to elevated validator unstaking demand and a lengthening wait to exit.", "detailed_summary_zh": "Ethereum's staking exit queue has climbed to a 2026 high with roughly 800,000 ETH queued for withdrawal, pointing to elevated validator unstaking demand and a lengthening wait to exit.", "detailed_summary_en": "Ethereum's staking exit queue has climbed to a 2026 high with roughly 800,000 ETH queued for withdrawal, pointing to elevated validator unstaking demand and a lengthening wait to exit.", "background_zh": "", "background_en": "", "community_discussion_zh": "", "community_discussion_en": "", "market_impact_zh": "", "market_impact_en": "", "importance_score": 7.0, "references": [], "confidence": 0.75, "story_ids": [ "google_news:article:7bc2aea28832ef14" ], "sources": [ { "url": "https://www.binance.com/en/square/post/373963921742855", "label": "Binance", "source_type": "google_news", "official": false } ] } ] }