Ethereum

<div class="coinjournal">
 <ul>
 <li dir="ltr">InfStones, a Lido node operator, will rotate its validator keys followng a vulnerability disclosure by blockchain security firm dWallet Labs.</li>
 <li dir="ltr">The vulnerability was acknowledged by Lido, which said its security team was working with the node operator to assess the scope and potential impact.</li>
 </ul>
 InfStones, a blockchain infrastructure provider and one of the key node operators for liquid staking protocol Lido Finance, will look to address a recent vulnerability issue by rotating its validator keys.
 The platform is expected to take the <a rel="noopener noreferrer nofollow" title="security" href="https://thebittimes.com/tag/security.html">security</a> step by temporarily withdrawing its Ethereum validators from Lido.&nbsp;
 <h2 dir="ltr" id="why-is-infstones-taking-this-security-measure">Why is InfStones taking this security measure?</h2>
 InfStones’ move follows the discovery of a <a rel="noopener noreferrer nofollow" title="security" href="https://thebittimes.com/tag/security.html">security</a> threat connected to the open-source library Tailon in July, and which was disclosed by researchers at blockchain <a rel="noopener noreferrer nofollow" title="security" href="https://thebittimes.com/tag/security.html">security</a> platform dWallet Labs.
 That chain of vulnerabilities at InfStones that put over $1 billion worth of assets at risk. The dWallet Labs team disclosed this to the Lido node operator to allow for remediation, Elad Ernst, cybersecurity researcher at dWallet Labs wrote on X.
 
 <blockquote class="twitter-tweet" data-width="500" data-dnt="true">
 1/ Our team at @dWalletLabs discovered a chain of vulnerabilities that could result in a loss of more than $1B in crypto assets. The full article here: https://t.co/cUUfevvUQ9 Let's take a closer look
 — Elad Ernst (@EladErnst) November 21, 2023
 </blockquote>
 
 Lido Finance acknowledged the vulnerability, noting the potential for an impact on 25 of InfStones servers.
 “Lido contributors are now actively working with the Node Operator on investigating the incident to understand its full scope and potential impact,” the platform said in an update.
 However, the protocol’s <a rel="noopener noreferrer nofollow" title="security" href="https://thebittimes.com/tag/security.html">security</a> team clarified that there had been no indication that keys had leaked or been compromised. The <a rel="noopener noreferrer nofollow" title="vulnerability" href="https://thebittimes.com/tag/vulnerability.html">vulnerability</a> was also unlikely to have impacted Lido Finance validators.
 
 <blockquote class="twitter-tweet" data-width="500" data-dnt="true">
 To clarify: There is currently no indication of key leakage or compromise, and the <a rel="noopener noreferrer nofollow" title="vulnerability" href="https://thebittimes.com/tag/vulnerability.html">vulnerability</a> may not affect validators related the Lido protocol.
 — Lido (@LidoFinance) November 22, 2023
 </blockquote>
 
 While InfStones notes that its keys have not been compromised, it has decided to transition to new keys. To continue with operations and to ensure stability of the liquid staking protocol, InfStone will redirect staked Ether (ETH) to Lido for re-staking.
 Lido is the largest liquid staking platform on Ethereum, with more than $18 billion in total value locked (TVL) as of November 23
</div>
Source: <a rel="noopener noreferrer nofollow" target="_blank" href="https://thebittimes.com/lido-node-operator-to-rotate-keys-after-security-firm-flags-vulnerability-tbt71403.html">https://thebittimes.com/lido-node-operator-to-rotate-keys-after-security-firm-flags-vulnerability-tbt71403.html</a>

Lido node operator to rotate keys after security firm flags vulnerability

Table of Contents

TheBitTimes

Other articles published on Nov 23, 2023

Bitcoin Is Moving From Binance Into Coinbase Crypto Reserve: CryptoQuant

Lido DAO Discovered A Security Vulnerability In Ethereum Protocol

KyberSwap Falls Victim to Major Security Breach: $46 Million in Crypto Assets Lost

Singapore’s watchdog issues rules for digital tokens after Binance fiasco

Spool’s V2 upgrade puts institutions in the DeFi driver’s seat

Netflix Director Seeks $14 Million from Streaming Giant After Dogecoin Windfall

Join our free newsletter for daily crypto updates!