Ethereum

Security

Notable

<p class="p1" style="text-align: justify">InfStones, a data operator for Lido Finance, has responded to a significant security vulnerability uncovered by security analysts at dWallet Labs. The team plans to temporarily withdraw <a href="https://en.coin-turk.com/6-5-billion-dollars-worth-of-ethereum-burned-after-london-hard-fork/" data-wpel-link="internal" rel="noopener noreferrer nofollow">Ethereum</a> validators from the liquid staking protocol and implement key rotations. The security vulnerability, which is associated with the open-source library Tailon, was reported to InfStones in July 2023 and has been resolved.</p>
<h2 class="p1" style="text-align: justify" id="how-did-the-process-begin">How Did the Process Begin?</h2>
<p class="p1" style="text-align: justify">Lido, the largest liquid staking protocol in the Ethereum ecosystem, oversees over 9.23 million Ethereum assets with a <a href="https://newslinker.co/category/finance/" data-wpel-link="exclude" rel="noopener noreferrer nofollow">market</a> value exceeding $19 billion. The protocol allows users to deposit <a href="https://en.coin-turk.com/one-of-the-largest-liquidations-in-ethereums-history-could-be-imminent/" data-wpel-link="internal" rel="noopener noreferrer nofollow">ETH</a> and participate in network staking through validator contracts, which provide users with a derivative token representing their deposited funds. A network comprised of operators, known as contributors, is responsible for running these ETH validator nodes, and the necessary infrastructure and servers are provided for their operation.</p>
<p class="p1" style="text-align: justify">Lido Finance stated that the security vulnerability affected 25 InfStones validator servers and had the potential for unauthorized access. However, there is no evidence of data leakage or exploitation resulting from this issue:</p>
<blockquote>
 <p class="p1" style="text-align: justify">“To clarify, there is currently no evidence of data leakage or compromise, and the security vulnerability may not affect Lido protocol validators.”</p>
</blockquote>
<p><img decoding="async" class="aligncenter wp-image-280296 size-full" src="https://coin-turk.com/wp-content/uploads/2023/11/infstones.jpg" alt="" width="1920" height="1080"></p>
<h2 class="p1" style="text-align: justify" id="notable-details-in-the-report">Notable Details in the Report</h2>
<p class="p1" style="text-align: justify">In the security report, dWallet Labs highlighted that the security vulnerability could potentially trigger a breach affecting the ETH assets staked through InfStones’ data on Lido. As a result, the company proposed a solution through the rotation of validator keys for all potentially affected data.</p>
<p class="p1" style="text-align: justify">InfStones stated that the issue reported by dWallet only affected a small portion of their infrastructure and less than 0.1% of their systems through a specific network port within the Tailon platform. This clarification revealed that only a limited number of validator nodes were affected:</p>
<blockquote>
 <p class="p1" style="text-align: justify">“The servers detected in production constitute less than 0.1% of the live nodes we have deployed to date. We have identified that incoming traffic through connection port number 55555 for Tailon can mimic observer privileges and access some of the development and test data.”</p>
</blockquote> Continue Reading: <a href="https://en.coin-turk.com/lido-finance-responds-to-security-vulnerability-discovered-by-dwallet-labs/" data-wpel-link="internal" rel="noopener noreferrer nofollow">https://en.coin-turk.com/lido-finance-responds-to-security-vulnerability-discovered-by-dwallet-labs/</a>

Lido Finance Responds to Security Vulnerability Discovered by dWallet Labs

Table of Contents

COINTURK NEWS

Other articles published on Nov 23, 2023

CoinGecko expands data offering through Zash acquisition

XRP Price Surges Despite On-Chain Metrics Decline, Defies Market Trends!

Dogecoin's Surge Reveals New Investor Interest and Large Transfers

Reshaping Content Monetization With Friend.tech

Binance outflows reach $1.2b in past 7 days

HTX and Heco Chain Hacked, Resulting in $97 Million Theft

Join our free newsletter for daily crypto updates!