THE BLOCK: MetaMask says an attacker pilfered roughly 0.385 ETH in staking rewards, worth just over $1,000 at the time of its September security breach, by changing reward recipient addresses. All affected Ethereum validators have now exited, and the firm says it found no evidence that wallets or customers’ staked principal were compromised.