MetaMask has begun withdrawing a large set of Ethereum validators from active duty after reporting a security incident inside part of its infrastructure. The company says ordinary wallet users were not exposed and that customer funds were not put at risk.