MetaMask disclosed on Wednesday that it is withdrawing from a set of Ethereum validators operated under its non‑custodial staking service after detecting a security breach. The company said the move is precautionary and that no immediate risk has been identified for user wallets. It is collaborating with external security firms and partners to investigate the incident.

Lido, the liquid‑staking protocol that hosts the affected validators, confirmed that MetaMask Staking began exiting its Ether (ETH) validators from the Lido network on the same day. The final withdrawals are projected to be completed by the end of October 7, after which the withdrawn ETH will re‑enter the protocol gradually. Lido developer Will Shannon noted that the re‑entry process could take up to 45 days because of the existing entry queue.

MetaMask has not disclosed the specific nature of the vulnerability, and no public evidence of compromised user funds has emerged. The company has not responded to requests for comment from Cointelegraph.

The episode underscores the operational risks associated with staking services and highlights the reliance of decentralized finance infrastructure on coordinated security practices across multiple platforms.