Ethereum

<ul class="list-ic vertical"> 
 <li> <span>1</span> <a>Lido Finance assured that LDO and stETH tokens remain safe despite flaws in the token contract.</a> </li> 
 <li> <span>2</span> <a>In the last 1 week, LDO and stETH have shown a downside market trend with over 5% and 2% drop respectively.</a> </li> 
</ul> 
<p>Recently, Lido Finance assured that both “Lido DAO (LDO) and staked-Ether (stETH) tokens remain safe despite hackers allegedly exploiting a known security flaw in LDO’s token contract.” It can be noted that the “fake deposit” attack enables bad actors to carry out a transfer where the requested value is larger than what the user actually owns.</p> 
<p>Notably, Lido Finance has highlighted in the official Ethereum Improvement Proposal document that both the “transfer” and “transferFrom” functions must return the transfer status. Meanwhile it only recommended reverting a transaction in exceptional cases. To resolve the security flaw, it also confirmed that the LDO token integration guides will soon be updated.</p> 
<h2 class="wp-block-heading" id="strong-lido-finance-shares-its-response-strong"><strong>Lido Finance Shares its Response</strong></h2> 
<p>Lido Finance, the Ethereum staking protocol, did not confirm about any exploits, however, acknowledged the security flaw was known and reassured <a href="https://www.thecoinrepublic.com/2023/09/06/ldo-price-forecast-2023-can-lido-dao-break-trend-this-time/" rel="noopener noreferrer nofollow">LDO </a>and stETH funds remain safe. It made its response through a September 10, 2023 post by blockchain security firm SlowMist on X ( formerly Twitter).</p> 
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter"> 
 <div class="wp-block-embed__wrapper"> 
  <blockquote class="twitter-tweet" data-width="500" data-dnt="true"> 
   <p lang="en" dir="ltr">This behaviour is expected and conforms to the ERC20 token standard (see tweet below). Both LDO and stETH (and Lido governance) remain safe. <br><br>Lido token integration guides will be updated with LDO specifics to make this more visible shortly.</p>— Lido (@LidoFinance) <a href="https://twitter.com/LidoFinance/status/1700888072299462895?ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow">September 10, 2023</a> 
  </blockquote> 
  <script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script> 
 </div> 
</figure> 
<p>According to SlowMist’s X post, “LDO’s flawed token contract allows bad actors to facilitate “fake deposit” attacks on exchanges as LDO’s token contract enables users to execute transactions even where they don’t have sufficient funds. This code varies from the Ethereum Request for Comment 20 (ERC-20) token standard as SlowMist noted.</p> 
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter"> 
 <div class="wp-block-embed__wrapper"> 
  <blockquote class="twitter-tweet" data-width="500" data-dnt="true"> 
   <p lang="en" dir="ltr"><img src="https://s.w.org/images/core/emoji/14.0.0/72x72/1f6a8.png" alt="🚨" class="wp-smiley" style="height: 1em; max-height: 1em;">SlowMist Security Alert<img src="https://s.w.org/images/core/emoji/14.0.0/72x72/1f6a8.png" alt="🚨" class="wp-smiley" style="height: 1em; max-height: 1em;"><br><br>There's a known operational issue in the LDO Token contract that has recently been exploited by malicious actors for “fake deposit” attacks on exchanges. <a href="https://t.co/uHxx89Oo1D" rel="noopener noreferrer nofollow">pic.twitter.com/uHxx89Oo1D</a></p>— SlowMist (@SlowMist_Team) <a href="https://twitter.com/SlowMist_Team/status/1700782725593268448?ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow">September 10, 2023</a> 
  </blockquote> 
  <script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script> 
 </div> 
</figure> 
<p>On the other hand, Lido Finance kept the point that the flaw is built into all ERC-20 tokens — not just its LDO token. Meanwhile, the security firm stated that the “fake deposit” attacks came from LDO’s token contract executing transfers where the value is larger than what the user actually owns. It triggers a false return as opposed to reverting the transaction.</p> 
<p>Meanwhile, the security firm said Lido’s token contract has recently been exploited via this attack, but no on-chain evidence was provided. An on-chain analyst “Hercules” further explained on September 10, 2023, that “the security flaw may not be picked up by cryptocurrency exchanges.”</p> 
<p>Moreover, SlowMist suggests that LDO holders have a look at the return values of the token contract transfers in addition to the “success or failure of a transaction.” It concluded that “token contract implementations and behaviors vary by project and to conduct comprehensive testing before integrating any new tokens.”</p> 
<h3 class="wp-block-heading" id="strong-ldo-and-steth-price-performance-strong"><strong>LDO and StETH Price Performance</strong></h3> 
<p>In the past week, both LDO and <a href="https://www.thecoinrepublic.com/2022/08/16/staked-ether-steth-could-cause-glitch-or-delay-in-the-merge-analysis/" rel="noopener noreferrer nofollow">StETH </a>have shown bearish market trends as LDO dropped nearly 6% while stETH declined over 2%. According to CoinMarketCap, at press time, LDO is trading at $1.46, with a 2.30% price drop and stETH is trading at $1,592.43 with a 1.70% price decline in the last 24 hours.</p> 
<p>It must be noted that after September 10, 2023, the price decline was clearly seen in both LDO and stETH prices. This still keeps its price to trade downwards.</p>

Lido Finance Shares About The Safety of LDO and stETH Tokens

Table of Contents

Thecoinrepublic.com

Other articles published on Sep 11, 2023

Shiba Inu Burn Rate Skyrockets, What's Next?

ZachXBT accuses four crypto influencers of market manipulation

Why Online Crypto Casinos Are Taking Over From The Traditional Gambling Market

Animoca Brands Secures $20M to Advance The Mocaverse Project

Ethereum Falls As bears Try To Break $1,600 Support Level

Wemade onboards Game Developers from Canada, Singapore and Hong Kong for WEMIX PLAY

Join our free newsletter for daily crypto updates!