MetaMask confirms transfer of 0.385 ETH reward

MetaMask confirmed that approximately 0.385 ETH in Ethereum staking rewards was redirected to a different address after unauthorized access to parts of its infrastructure on September 28, which let attackers alter the reward-receiving addresses for some validators. The company said it detected and fixed the address-change issue the same day, and that all affected validators have now completed their exit procedures, though some customers experienced temporary withdrawal delays. MetaMask attributed the exposure to reward addresses being stored in centrally managed infrastructure. The incident matters as a test of how staking reward custody is handled at a major wallet provider, and the next thing to watch is whether MetaMask details reimbursement for the diverted rewards and further hardens how validator addresses are stored.