ConsenSys founder Joseph Lubin said MetaMask’s recent cyberattack affected part of the company’s infrastructure but did not compromise users’ wallets, private keys, Secret Recovery Phrases or assets. MetaMask temporarily shut down some Ethereum staking machines, rotated validator keys and began an exit process expected to finish on Oct. 7. Withdrawing ETH could take about 45 days, followed by a potential 45-day Ethereum entry queue that could leave assets dormant, reduce staking yields and expose offline validators to penalties. The incident also prompted phishing warnings. It follows a separate security scare disclosed in July 2026, when ConsenSys discovered that a North Korea-linked developer using the alias Tyler Knapp had worked on MetaMask for several weeks without the company knowing his identity; ConsenSys said no funds or user data were stolen and no malicious code was deployed.