MetaMask Pulls Its Validators Out of Lido
Plus: the SEC would let investment advisers hold client crypto themselves
gm, Defiers!
These are the biggest stories in DeFi and crypto:
- MetaMask Staking began exiting its Lido validators after an infrastructure compromise, with up to 45 days to re-enter
- Hyperliquid matched centralized depth on four of five crypto assets and cost less all-in, Castle Labs found
- World Liberty opened WLFI staking with a $1.25M USD1 pool, a 180-day lock and a voting requirement
- EIP-8363's authors pulled the Ethereum staking reward burn out of the Hegotá upgrade
- Judge Rochon dismissed the LIBRA and M3M3 class action with prejudice, finding six months too short for RICO
Exiting an Ethereum validator and getting the ETH back are separate events. Lido put the distance between them at up to 45 days: the exit, then the sweep to a withdrawal address, then a queue to get back in.
MetaMask Staking began exiting the validators it operates inside Lido after an infrastructure compromise, according to Lido's Sept. 30 disclosure. MetaMask said on Oct. 1 that it found no indication wallets or customer funds were affected, and called the exits precautionary. Lido expects the last of them out by Oct. 7, told stETH holders no action is required, and warned of foregone rewards and downtime penalties if validators go offline. Neither company has said how the infrastructure was compromised. Sentora's Morpho vaults saw sharp outflows overnight.
It was less than three months ago when Consensys halted MetaMask releases in July over a North Korea-linked contractor. The wider tally is worse: CertiK counted $766.4 million in September exploit and phishing losses, NEAR Intents halted services after a $3.8 million loss on Thursday, and Bitget's hot-wallet breach reached $387.5 million last week.
Lido's answer to operator failure is structural. A diverse node-operator set, overhauled in July, and an ad hoc reserve fund of more than 6,750 stETH are meant to absorb one operator going down, and that part held: Aave founder Stani Kulechov said Aave markets were operating normally. Ethereum's own limits are what the design cannot route around. The network caps how much ETH enters and leaves staking at a time, and rewards accrue to nobody while a validator sits in either queue. Lido distributes staking rewards proportionally across stETH holders, so the cost spreads to people who never picked MetaMask as an operator.
The SEC proposed on Oct. 1 letting registered investment advisers hold client crypto themselves when no qualified custodian will take it, conditional on two-person transaction authorization, a separate onchain address per client and annual cybersecurity reviews. Those conditions describe a full-time operations job. MetaMask does it full time, for institutions, and still spent Thursday pulling validators offline.
Read more below!
Stellar Hits $4B+ in RWAs: Why Wall Street Institutions Are Choosing Stellar
Tokenized real-world assets on Stellar are approaching $4 billion, up about 360% this year. Camila Russo asks Stellar Development Foundation CEO Denelle Dixon what the institutions moving them wanted before they would come, and what Stellar had to build to get them.
MetaMask Staking Exits Lido Validators After Infrastructure Compromise
MetaMask Staking has begun exiting the Ethereum validators it operates inside Lido after an infrastructure compromise, according to Lido's Sept. 30 disclosure. MetaMask said on Oct. 1 that it found no indication wallets or customer funds were affected, and called the exits precautionary. Lido expects the last MetaMask-operated validators out by Oct. 7 and puts the exit, withdrawal and re-entry cycle at up to 45 days. stETH holders face foregone rewards and possible downtime penalties. Neither company said how the breach happened.
Onchain Perps Close Execution Gap With CEXs, Castle Labs Says
Hyperliquid held as much resting depth as the Binance, Bybit and OKX median on four of five crypto assets, a Castle Labs study of live order books across 10 venues found. On a $100,000 bitcoin order the centralized median cost 5.07 basis points all-in, against 4.71 on Hyperliquid and 0.41 on Lighter, which charges standard accounts no fee. Real-world asset markets still diverge: venue indexes spread as far as 30 basis points once the underlying market closes, and some venues keep charging funding through the weekend.
World Liberty Launches WLFI Staking, Plans $1.25M USD1 Pool
World Liberty Financial launched WLFI staking on Oct. 1 with a $1.25 million USD1 rewards pool allocated over 180 days. Holders open a 180-day position using unlocked WLFI on Ethereum and cannot exit early. Claiming requires one personally cast governance vote for every 90 days staked, two at day 180, and a delegate's votes do not count. The pool is shared, so each additional stake dilutes the reward per token. Withdrawing without the votes forfeits accrued rewards back to the pool.
Authors Pull Ethereum Staking Reward Burn From Hegotá
The authors of EIP-8363 withdrew their proposed burn of Ethereum validator rewards from the Hegotá upgrade on Oct. 1. Co-author Jérôme de Tychey said a fork scoping exercise was the wrong venue to settle an issuance policy change. Current issuance rules stay intact. The proposal would have destroyed a growing share of validator rewards as staking rises, phased in over 18 months. The authors named Lido among those offering to help run a separate process, starting with an issuance forum at Devcon in November.
Judge Dismisses LIBRA and M3M3 Class Action With Prejudice
A federal judge dismissed the class action over the LIBRA and M3M3 memecoin launches with prejudice, ending the case against Hayden Davis, Kelsier Ventures, former Meteora CEO Ben Chow and Meteora itself. Judge Jennifer Rochon held that six months of launches cannot sustain a RICO pattern, citing Second Circuit precedent that has never accepted under two years. She also found the plaintiffs never pleaded Meteora as an entity capable of being sued. The Argentine criminal investigation runs separately and is untouched.
Other Stories Worth Your Time
SEC Proposes Crypto Self-Custody Route for Investment Advisers — advisers could hold client crypto when no qualified custodian will take it, subject to two-person authorization, per-client onchain addresses and annual control reviews.
US Sanctions A7 Network, Proposes Ban on Sub-Agent Payments — Treasury blocked the Russia-linked network over alleged Iran sanctions evasion, and FinCEN would bar US transfers involving six named sub-agents, crypto included.
Sentora’s Morpho Vaults See Sharp Outflows Amid MetaMask Staking Incident — the RLUSD and PYUSD vaults held about $8.46 million and $2.38 million of available liquidity in Morpho's latest snapshots.
CertiK Tallies $766.4 Million in September Exploit and Phishing Losses — Bitget and Liquid Network account for most of the month's total, and recovered or frozen funds cut the remaining damage substantially.
NEAR Intents Halts Services, Reports $3.8 Million Loss — the protocol pledged full compensation and said deposits and withdrawals on 11 networks face a longer suspension while infrastructure repairs continue.
Drift Opens DFX Claims With Recovery Pool Covering About 1% of Losses — redeeming burns the token and ends any claim on future deposits; holders who wait can take revenue-funded recovery or sell their DFX.
Marinade Says Council Blocked DAO Takeover Attempt — the council vetoed two proposals within six hours, Marinade says. No funds moved, and its staking services were unaffected.
Stablecoin Treasury Growth Partly Offsets China’s Retreat, SF Fed Study Finds — issuers buy short-dated bills while China's selling sits in longer maturities, so the offset depends on who keeps buying stablecoins.
Blockworks Opens Its Full Dataset To AI Agents — a hosted MCP server gives ChatGPT, Claude and Cursor read access to the data behind Blockworks research, included with every API plan.
OpenZeppelin and T-REX Network Introduce new Framework for Regulated Token Eligibility and Recovery — the OnchainID v3 redesign adds modular smart accounts, and existing 2.x identities need fresh deployments to move over, according to the changelog.
Trending on The Defiant
Chainlink Unveils Fulcrum for Cross-Chain Institutional Repo · TRADFI
Coinbase Teases Pokémon Card Packs Backed by Physical Collectibles · NFTS
Robinhood Unveils In-App AI Agents for Crypto and Stock Trading · CEFI
Balancer Sets Shutdown Dates After BAL Holders Approve Wind-Down · DEFI
HSBC Names Hong Kong Stablecoin 'RedCoin' Ahead of Retail Rollout · TRADFI
Free newsletters
Good reporting. Delivered.
Choose your coverage: crypto and DeFi, the future of finance, or both.
Free. Unsubscribe anytime.
