MetaMask Staking doesn't control the withdrawal keys. an operator compromise can't redirect the staked ETH.
it can redirect the block fees.
Sep 30, 12:12–16:46 UTC: 18 blocks from @MetaMask -run validators paid their fees to a wallet funded through Tornado Cash at 10:27.
total: 0.36 ETH.
whoever set that address had access somewhere inside the validator operation.
that's enough to treat the signing environment as potentially compromised. bad signatures can get validators slashed.
Ethereum can't rotate a validator signing key in place. you exit, withdraw and restake with fresh keys.
so they're rotating the validator.
btw, we've seen the containment playbook before.
Sep 9, 2025: Kiln disclosed a security incident and exited its Lido validators.
28 days later, the cause: compromised GitHub token -> CI workflows -> cloud credentials.
104 days later, the bill: 207.312 ETH in missed rewards across 5,726 validators.
MetaMask hasn't disclosed the root cause or the validator count.
one thing is already different. Kiln found no evidence its Ethereum validators were touched.
here, someone was already collecting the fees.
https://t.co/hI6VxZkX7i
Qwen 3.8 27B is the model that packs the highest intelligence per size
It's fast, smart, and very good with agentic tasks
It can handle pretty much everything you throw at him
And it's also Free🤑 for a limited time in Nexus right now
⚡️Go squeeze every prompt from it! 🥵
@raopreetam_@d_gusakov@Heracles1337@ethereum a few minutes installing dappnode and you get a bunch of neat stuff packaged with it! UI, Tailscale/Wireguard for remote access, a UI for validator keys and a bunch of neat packages in the Dappstore!
Easy! Give OpenClaw or Hermes (both available in Dappnode) your problem and ask them to query you on what your preferences are, what would you like, etc.
If you use Nexus as the model provider, you keep your personal info private from any profiling company 🕵️
If some of the class info is in PDF, feed it to it, if it's behind password... again, feel free to give it your account details because... the filesystem is yours and only yours and the model provider can't read your password!
If you are not running your own agent you are behind
"But it's too complicated"
In 1:47 seconds you can have it running on your Dappnode
Get your agent, fully private & self-sovereign
Comment 👇which thing you'd die to automate in your life and we'll make a video of how
Every EVM developer should have a local archive @ethereum node and never trust RPC providers or spend money on RPC subscriptions.
I run archive Reth + Prysm on my @dappnode, and it works like a charm. 4TB SSD is more than enough
Thank you❤️
TheDAO Fund's Ethereum Security round on Giveth sent Dappnode 5.6343 ETH: 1.2227 from the community, 4.4116 matched.
Here's how that money becomes Ethereum security: easier home staking → more solo validators → a more decentralized, safer Ethereum.
Indirectly, we dropped Smooth's fee from 7% to 5%, so solo stakers keep more of their rewards. Solo staking must stay viable (and that includes rewarding them over centralized players)
The guys from @exolabs , which we have used extensively in @dappnode, dropped https://t.co/KWu4ep6MXM.
For virality, they let you claim your name already.
https://t.co/hx4uiEwi6J