DeFi· ★★★★· neutral·

Ethereum Patches Flaw That Let Node Operators Capture Staked ETH

  • —The fix was merged on October 26, two weeks after the flaw was reported on GitHub
  • —Only deposits still queued at fork activation could have been misrouted
  • —Under EIP-8282, withdrawal credentials rather than the public key decide where a pending deposit goes
  • —Teku and Lodestar still need matching client code; no new Hoodi date has been set
Why it matters: The bug could have hit pooled staking designs such as Lido, Rocket Pool and Origin, so shipping the fix before mainnet lowers the risk to staked ETH.
#ETH
Source: Coindoo
More on this
DeFi · Oct 16
Polygon Patches Two Bor Bugs That Let Valid Transactions Slow Nodes
 Security · Oct 21
US federal agents traced Ethereum node operator by IP and subpoenaed him as witness
 Security · Oct 19
Ethereum node operator testifies in $53M crypto theft case