[Analyst: Suspected Attack on 19 MetaMask Validators, Attacker Only Stole Approximately 0.36 ETH in Rewards] BlockBeats News, October 1: On-chain analyst Kaden reported that 19 suspected MetaMask validators received block rewards, but 18 of the rewards were not paid to the correct fee recipient addresses. Instead, they were transferred to an address funded by Tornado Cash. Following the incident, approximately 17,000 validators voluntarily exited, involving around 523,000 ETH. It is currently unclear whether the attacker has the ability to modify all fee recipient addresses. As of now, three suspected affected validators have not exited, and approximately 821 potentially affected validators also remain active, with the specific reasons still unknown. Analysts believe the attacker only managed to steal approximately 0.36 ETH in rewards and is likely unable to withdraw the staked ETH from the validators. However, if the attacker somehow obtained the signing authority of the validators, they could theoretically use this authority to deliberately trigger penalties against the validators. Previously, MetaMask released a security update disclosing that some of its infrastructure was affected by a security incident. Currently, there are no signs of a direct threat to the MetaMask wallet. [Original Link]