MetaMask says recent attack didn't affect wallet infrastructure
Cryptocurrency wallet provider MetaMask said a recent security incident has not affected MetaMask wallets or its wallet infrastructure.
Cryptocurrency wallet provider MetaMask said a recent security incident has not affected MetaMask wallets or its wallet infrastructure.
The MetaMask non-custodial crypto wallet (developed by blockchain software company Consensys) lets users store and manage assets on the Ethereum network and compatible blockchains.
MetaMask revealed on September 30 that it was investigating an ongoing infrastructure security incident and exited affected validators (Ethereum network nodes responsible for proposing blocks, verifying crypto transactions, and maintaining Ethereum blockchain security) within non-custodial staking operations.
The issue was identified and addressed on the same day, and about 0.385 ETH in rewards was diverted.
It also added that the attack did not compromise MetaMask users' Secret Recovery Phrases or private keys and that it was working with affected customers to refund the lost rewards.
More recently, crypto exchange Binance confirmed that North Korean hackers stole $6.34 billion after compromising its wallet infrastructure by tricking an employee into installing malware in a fake job interview.
While the company shared almost no details at the time and redirected BleepingComputer to the public statement when asked what part of its infrastructure was affected, in a Thursday update it said that a threat actor gained access to systems used to store recipient addresses and diverted some execution-layer staking rewards.
These rewards are separate from customers' staked ETH, MetaMask said .
We are working directly with affected customers and partners to address any outstanding impact, MetaMask noted.
Customers whose staking arrangements were affected should follow any guidance provided directly by MetaMask or their staking provider. Last month, Ledger also asked Asian resellers and distributors to halt wallet sales and remove products from shelves while it was investigating multiple hardware implant incidents.
What happened
Cryptocurrency wallet provider MetaMask said a recent security incident has not affected MetaMask wallets or its wallet infrastructure.
The MetaMask non-custodial crypto wallet (developed by blockchain software company Consensys) lets users store and manage assets on the Ethereum network and compatible blockchains.
MetaMask revealed on September 30 that it was investigating an ongoing infrastructure security incident and exited affected validators (Ethereum network nodes responsible for proposing blocks, verifying crypto transactions, and maintaining Ethereum blockchain security) within non-custodial staking operations.
What changed
The issue was identified and addressed on the same day, and about 0.385 ETH in rewards was diverted.
It also added that the attack did not compromise MetaMask users' Secret Recovery Phrases or private keys and that it was working with affected customers to refund the lost rewards.
More recently, crypto exchange Binance confirmed that North Korean hackers stole $6.34 billion after compromising its wallet infrastructure by tricking an employee into installing malware in a fake job interview.
Who is affected
While the company shared almost no details at the time and redirected BleepingComputer to the public statement when asked what part of its infrastructure was affected, in a Thursday update it said that a threat actor gained access to systems used to store recipient addresses and diverted some execution-layer staking rewards.
These rewards are separate from customers' staked ETH, MetaMask said .
Why it matters
We are working directly with affected customers and partners to address any outstanding impact, MetaMask noted.
Customers whose staking arrangements were affected should follow any guidance provided directly by MetaMask or their staking provider. Last month, Ledger also asked Asian resellers and distributors to halt wallet sales and remove products from shelves while it was investigating multiple hardware implant incidents.
Attribution
BleepingComputer: Cryptocurrency wallet provider MetaMask said a recent security incident has not affected MetaMask wallets or its wallet infrastructure.
What to watch next
Watch for revised vendor guidance, fixed versions and mitigation updates.