An attacker redirected some MetaMask Staking rewards without touching a single withdrawal key. On Ethereum, the key guarding staked ETH does not decide where that stake's income goes.

Learn more about crypto and blockchain technology.