Monitoring data cited by Kaden suggests the earlier security incident involving MetaMask validators may be linked to a change in the block reward recipient address. According to Kaden, 19 MetaMask validators received block rewards, but rewards from 18 of them were not sent to the correct fee recipient address. Instead, the funds were routed to an address identified as being funded by Tornado Cash, listed as 0x98B9...24A3. Kaden said the attacker appears to have stolen about 0.36 ETH in rewards.
At this stage, Kaden said there is no sign that the attacker had the ability to withdraw staked ETH. Separate data also shows that about 17,000 validators have voluntarily exited, involving roughly 523,000 ETH. Kaden added that it remains unclear whether the attacker was able to modify all fee recipient addresses. The report focuses on the reward flow tied to validators and does not state that staked principal was extracted.
According to monitoring data cited by Kaden, the earlier security incident involving MetaMask validators may have been caused by tampering with the block reward recipient address.
Kaden said 19 MetaMask validators had received block rewards. Of those, rewards from 18 validators were not paid to the correct fee recipient address and were instead sent to an address funded by Tornado Cash, identified as 0x98B9...24A3.
The amount actually stolen was about 0.36 ETH in rewards, Kaden said. Based on the current information, the attacker may not have had the ability to withdraw staked ETH.
Data also shows that about 17,000 validators have voluntarily exited, involving roughly 523,000 ETH. Kaden added that it is still unclear whether the attacker had the ability to change all fee recipient addresses.
This article was originally published by Bit.Fan. For more cryptocurrency news and market insights, visit www.bit.fan. Disclaimer:
The market information, project data, and third-party content displayed on this platform are for industry information sharing only and do not constitute any form of investment advice or return commitment.
Cryptocurrency trading carries high risks. Users should fully assess their risk tolerance and make independent decisions. All profits, losses, and legal responsibilities are borne by the users themselves.
