Ethereum 2.0 detected a dangerous bug
With it, node operators may be able to steal user funds
08.10.2021 - 09:55
386
1 min
0
What's new? On Twitter, Stake Wise posted news about the discovery of a critical bug in Ethereum 2.0 protocols called Lido and Rocket Pool. According to the co-founder of the service Dmitry Tsumak, there is a serious risk of the funds’ theft.
1/ Last night around 7PM UTC, our founder Dmitri Tsumak (@tsudmi) discovered a severe vulnerability in @Rocket_Pool that could lead to the theft of users’ funds if exploited. Upon further examination, it became apparent that @LidoFinance's architecture was also affected. https://t.co/xlpZMYkFMe— StakeWise (@stakewise_io) October 5, 2021
What consequences can be there? This vulnerability allows validators and operators of Ethereum 2.0 nodes to take over users' assets. Lido representatives believe that about $71 million is already under threat, however, in their opinion, node operators will not use this bug, because they represent “respected and ethical companies”.
When will the bug be fixed? Currently, Lido has limited stacking limits for operators, and Rocket Poll has reported testing new methods for bug fixing in collaboration with Sigma Prime auditors. Preliminary verification results may be available by October 18.
Useful material?
Technologies
Network fees will be integrated into the cost of swaps
Nov 22, 2024
Market
The company’s unrealized profits from investing in its first cryptocurrency approached $14 billion
Nov 19, 2024
Incidents
The search, the reason for which was not announced, took place a week after the election, the results of which Polymarket users predicted quite accurately
Nov 14, 2024
Market
Analysts point to the growing popularity of the first cryptocurrency as a safe haven asset
Nov 13, 2024
Market
The product will begin trading on the Swiss Exchange on November 19
Nov 12, 2024
Market
The company’s unrealized profits from investing in the first cryptocurrency approached $13 billion
Nov 12, 2024