Metamask's vulnerability revealed today seems relatively controllable for now. Even if the signing key is compromised (since it's usually on the operator's server), the worst attackers can do is mess with signatures, which carries the risk of slashing penalties, or in some configurations, redirect block rewards and tips to their own address. So far, only 0.36 ETH has been traced, which is just this type of reward, not the stakers' principal. Let's wait for the official report. Hope we get through this smoothly.