MetaMask infrastructure was accessed without authorization, and 0.385 ETH staking rewards were transferred.

MetaMask disclosed on November 5 that some of its infrastructure was accessed without authorization on September 28. The attackers transferred approximately 0.385 ETH staking rewards by modifying the reward receiving address of Ethereum validators. The issue was resolved on the same day, and all affected Ethereum validators have completed their exit. The incident resulted in withdrawal delays and staking reward losses for some customers, but there is no evidence that user wallets, private keys, or customer staking principal were compromised.