InfStones

What happened

Lido officials say that over the course of the last 24 hours, Lido DAO contributors were made aware of a platform vulnerability that affected an active Node Operator using the Lido on Ethereum protocol (InfStones) sometime over the course of the previous few months. The vulnerability was disclosed to InfStones in July 2023 by security researchers dWallet Labs. The Node Operator has announced that the vulnerability has been 184 addressed. The vulnerability is related to the possible exposure of root-level access to 25 validator servers that may not be related to the Lido protocol, including possibly key material, to external attackers. It is not clear to contributors at this time if servers and/or keys related to Lido validators were included in the scope of affected systems or not.

Details

Date

Nov 23, 2023

Kind

Hack or exploit

Method

Third-party Vulnerability

How in

Keys, accounts and infrastructure

Target

not stated

Chains

not stated

Reported by

• SlowMist Hacked ↗