TechFlow news, on August 1, Lido published a security disclosure on X: a vulnerability related to Lido CSM and the permissionless validator contract used to verify validator withdrawals has been reported and fixed. The vulnerability was not exploited, and no CSM node operators were affected. stETH holders were also unaffected. As part of the remediation, the fix was implemented via an oracle mitigation solution (disabling bond burning functionality) and DAO Proposal 190. Lido has paid a bug bounty to the white-hat hacker who disclosed the issue through the Lido×Immunefi program.
Add to Favorites
Share to Social Media
