Hacking News
Lido Engineer Warns of Staking Deposit Hijack Risk
Lido Finance's head of engineering, Dima Gusakov, has warned of a potential front-running attack during Ethereum's Glamsterdam hard fork. The attack could allow a malicious node operator to claim stakers' ETH deposits, leading to a validator not activating. This vulnerability is specific to the pre-fork phase and involves builder deposits and validator deposits running through shared queues. The issue was raised in the Ethereum consensus-specs repository and is not a permanent flaw in Ethereum's design.