A security breach at MetaMask forced thousands of Ethereum validators to exit, clogging the network with the biggest withdrawal queue in nine months and raising new doubts about staking safety.
Ethereum's staking setup is under strain after MetaMask pulled about 17,000 validators in response to a targeted security breach. This move has created the biggest validator exit queue since December 2025. Hundreds of thousands of ether are now stuck, and stakers are facing long waits to get their funds out.
Security breach exposes validator rewards
The trouble started when onchain security researcher Kaden spotted that fee rewards from 18 out of 19 MetaMask-run validators, which had just proposed blocks, were being sent to an address funded through Tornado Cash. Tornado Cash is a privacy tool that mixes crypto transactions. The attacker only got about 0.36 ETH, but the breach raised big questions about how they got in and whether more sensitive validator signing keys were at risk. If those keys were exposed, validators could face slashing penalties for bad or careless behavior on the network.
MetaMask confirmed it is responding to a security incident affecting part of its infrastructure, but found no direct threat to MetaMask wallets.
MetaMask has not said exactly how many validators were hit or how far the breach went. The company said part of its infrastructure was compromised and that it was pulling affected validators as a safety step. MetaMask stressed that its staking is non-custodial and it does not hold clients' withdrawal keys. This means an attacker with only validator-level access cannot withdraw staked ETH. Still, this setup does not remove the risk of slashing if signing keys are misused. As of the latest update, 821 possibly affected validators had not yet exited, including three whose fee rewards were reportedly diverted. It is not clear why these validators are still running.
Network-wide withdrawal delays
The mass exit has jammed Ethereum's validator withdrawal process. Validator Queue data shows about 773,447 ETH was waiting to leave the validator set as of Wednesday. The projected wait for validators to clear the exit queue is 13 days and 10 hours. After that, there is another withdrawal sweep delay of 7.6 days before balances can be withdrawn. This backlog is bigger than the previous high of about 476,000 ETH in May and is the worst congestion since late 2025.
Ethereum's protocol limits how fast validators can join or leave to keep its proof-of-stake system stable. Right now, the churn rate is 256 ETH per epoch, and each epoch lasts about 6.4 minutes. Large exits have to be processed in steps. After exiting, the withdrawal sweep moves through eligible validators to send their balances to withdrawal addresses.
Lido has clarified that stETH stakers do not need to take any action, as ETH from MetaMask Staking validators will be returned to the protocol gradually as the exit cycle completes. The full exit and re-entry process could take up to 45 days due to network queue constraints.
MetaMask and Lido face extended disruption
For people staking through MetaMask, the disruption could drag on even longer. MetaMask runs its validators through Lido, a major liquid staking protocol. Lido says the full process of exiting, withdrawing, and possibly re-entering the validator set could take up to 45 days. Part of the reason is that the entry queue for new validators is now 27 days long. This long timeline makes it harder for stakers to plan liquidity and may shake trust in third-party staking services.
MetaMask says it is working with clients, partners, and security advisers to handle the incident and has found no immediate threat to MetaMask wallets. The company has not said if any slashing happened or if signing keys were exposed. With little public detail, there are still open questions about the full impact and future risks for stakers using similar providers.
Broader implications for Ethereum staking
The MetaMask breach is the latest in a string of problems for Ethereum's staking world. As reported earlier, Ethereum has added new technical safeguards and protocol changes to balance decentralization, security, and performance. But the current backlog shows what can happen when big validator operators are compromised or forced to exit all at once.
For U.S. users and institutions that rely on staking providers, this episode shows why it is important to understand custody setups, withdrawal timelines, and the technical split between validator and withdrawal keys. Ethereum's protocol design limits the risk of total loss, but it cannot fully protect stakers from operational delays or the fallout from infrastructure breaches. The industry's dependence on a few big staking intermediaries is still a weak spot that has not been fixed.
Validator Queue data shows Ethereum's validator exit queue hit 773,447 ETH on Wednesday, with a churn rate of 256 ETH per epoch and an estimated 13-day, 10-hour wait for exiting validators. The extra withdrawal sweep is expected to take 7.6 days. This is the largest exit backlog since December 2025 and beats the previous peak of 476,000 ETH in May. Lido estimates the full exit and re-entry process for affected validators could take up to 45 days, given the current 27-day entry queue.
Ethereum's validator exit and withdrawal process is built to shield the network from sudden shocks. But it also means that big exits-whether from security incidents or other failures-can leave stakers unable to access their funds for weeks. The churn rate and withdrawal sweep force a slow transition, but they also create a window where users cannot get their money out. As staking grows and gets more complex, the strength of both protocol-level protections and third-party infrastructure will stay at the center of Ethereum's concerns.
