Approximately 523,000 ETH validators voluntarily exited; MetaMask security incident involves block reward redirection for 19 validators

Odaily News: According to Kaden's monitoring, the previously reported security incident involving MetaMask validators may be related to the tampering of block reward recipient addresses. Kaden stated that 19 MetaMask validators had received block rewards, of which 18 validators' rewards were not paid to the correct fee recipient addresses, but instead transferred to an address (0x98B9...24A3) funded by Tornado Cash. The rewards actually stolen by the attacker amounted to approximately 0.36 ETH, and it currently appears that the attacker may not have the ability to withdraw staked ETH. Data shows that approximately 17,000 validators have voluntarily exited, involving about 523,000 ETH. Kaden stated that it is currently unclear whether the attacker has the ability to modify all fee recipient addresses.