MetaMask discloses unauthorized access to infrastructure, with only a small amount of staking rewards transferred.

BlockBeats news, November 6 - MetaMask released a security incident update on November 5, stating that on September 28, some of its infrastructure was accessed without authorization. The attacker modified the reward receiving addresses of some Ethereum validators and transferred approximately 0.385 ETH in staking rewards.

MetaMask stated that the related issue was fixed on the same day, and all affected Ethereum validators have now completed their exit. This incident caused temporary delays in withdrawals for some customers and may have resulted in losses of staking rewards. MetaMask emphasized that there is currently no evidence that user wallets, private keys, or customers' staked principal were compromised or withdrawn without authorization.