User update

[OCT 1 - UPDATES]

We’re continuing to actively investigate and respond to the security incident affecting part of our infrastructure.

Our focus remains on working closely with affected partners and taking appropriate steps to protect users. As part of this, we worked with our partners to take the precautionary step of exiting affected validators. Based on our investigation to date, there is no indication that MetaMask wallets or customer funds have been affected. Our teams continue to work through containment and verification, and we’ll share further verified information as appropriate.

As always, please remain vigilant: be cautious of unsolicited messages, never share your Secret Recovery Phrase or private keys, and rely on official MetaMask channels for updates. MetaMask will never ask you for your Secret Recovery Phrase.

[SEPT 30 - UPDATES]

We are currently responding to an ongoing security incident affecting part of our infrastructure.

We are actively addressing and remediating the issue internally, in coordination with external partners and security advisors.

At this time, we have identified no immediate threat to MetaMask wallets.

As a precautionary measure, we are proactively exiting affected validators within our non-custodial staking operations, in coordination with clients and partners. As a reminder, our staking operations are non-custodial in nature and we do not manage withdrawal keys for stake on behalf of our clients.

We will continue to monitor the situation closely and provide further updates as appropriate.