Worked example · 2026-09

MetaMask Staking — a node-operator infrastructure compromise redirected block rewards, and ~17,000 validators were exited as a precaution — MetaMask non-custodial staking / Ethereum — 2026-09-30

Loss

~0.36 ETH in diverted block rewards per researcher Kaden (unconfirmed by MetaMask). ~523,000 ETH across ~17,000 validators was exited as a precaution; that is exposure, not loss. MetaMask says no wallets or customer funds were affected.

OAK Techniques observed

OAK-T15.003 (Operator-Endpoint Compromise — primary, operator-stated at the access layer. MetaMask disclosed "a security incident affecting part of our infrastructure" in its non-custodial staking operations and exited affected validators with partners; Lido's disclosure describes the same precautionary out-of-order exits. See techniques/T15.003-operator-endpoint-compromise.md). Kaden's on-chain read: 18 of 19 MetaMask validators that won blocks paid rewards to a Tornado-funded address (0x98B9231de84334c1d48BA0b72CF13f92484924A3) instead of the configured fee recipient, i.e. the attacker could change validator client configuration. Whether signing keys were reachable — and so slashing risk — is unknown.

Attribution

unattributed.

Key teaching point

Validator configuration access is signing-adjacent. The attacker took dust, but access that can change a fee recipient may also be able to make validators sign; the mass exit was priced on that, not on the 0.36 ETH.