The MetaMask incident represents the second major Lido operator infrastructure compromise in just over a year, following Kiln's exit of all its Ethereum validators in September 2025.