MetaMask says recent attack didn't affect wallet infrastructure
Threat actor diverted 0.385 ETH in staking rewards but no customer keys were compromised.
MetaMask confirmed an infrastructure security incident where a threat actor gained access to systems storing recipient addresses and diverted staking rewards. Approximately 0.385 ETH was lost, but the company found no evidence of compromise to customers' staked principal or withdrawal keys. The affected systems have been secured, and users do not need to take action.
Unconfirmed: The specific vulnerability exploited is not detailed in the report
- 0.385 ETH in rewards diverted
- Non-custodial wallets unaffected
- Secret Recovery Phrases and private keys safe
- Validators exited due to incident
- Working with affected customers for refunds
Impact: diversion of staking rewards
- 1.Follow guidance from MetaMask or staking provider
- 2.Monitor for any outstanding impacts
From the original article
2 min read at bleepingcomputer.com
Cryptocurrency wallet provider MetaMask said a recent security incident has not affected MetaMask wallets or its wallet infrastructure. [...]
By Sergiu Gatlan · bleepingcomputer.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.