Lido Oracle Update🚹 On May 9th, a wallet managed by Chorus One and used to vote in the Lido Oracle was compromised. The attacker drained 1.4 ETH from the wallet. The wallet has since been removed from other oracle allowlists and rotated to a new address. An emergency DAO vote is in process. Our team has been working around the clock alongside Lido to investigate the root cause. Preliminary findings suggest that the wallet’s private key, generated in 2021, was improperly stored in a LastPass account by a team member. This violated our internal security policies at the time. We fully decommissioned LastPass usage and overhauled our key management infrastructure during our ISO 27001 certification process, completed in 2024. This wallet was not used to store assets, which likely contributed to the original mishandling. At the time of writing, it is our view that no customer funds or validator infrastructure were affected, and this incident remains isolated. We will share a full post-mortem as soon as the ongoing investigation concludes.
⚠ Emergency Lido DAO vote announcement: rotate single Lido Oracle related to compromised Chorus One oracle private key. Stakers are not affected. The protocol remains secure and fully operational. The oracle system is robust by design, with a 5/9 quorum, and all other participants remain safe. ✔ Oracle ops functioning, no sign of issue in oracle software or reports ✔ Other eight oracles checked and no signs of compromise ✔ No signs of broader Chorus One compromise The vote will be started shortly.
193,88 k
0
Le contenu de cette page est fourni par des tiers. Sauf indication contraire, OKX n’est pas l’auteur du ou des articles citĂ©s et ne revendique aucun droit d’auteur sur le contenu. Le contenu est fourni Ă  titre d’information uniquement et ne reprĂ©sente pas les opinions d’OKX. Il ne s’agit pas d’une approbation de quelque nature que ce soit et ne doit pas ĂȘtre considĂ©rĂ© comme un conseil en investissement ou une sollicitation d’achat ou de vente d’actifs numĂ©riques. Dans la mesure oĂč l’IA gĂ©nĂ©rative est utilisĂ©e pour fournir des rĂ©sumĂ©s ou d’autres informations, ce contenu gĂ©nĂ©rĂ© par IA peut ĂȘtre inexact ou incohĂ©rent. Veuillez lire l’article associĂ© pour obtenir davantage de dĂ©tails et d’informations. OKX n’est pas responsable du contenu hĂ©bergĂ© sur des sites tiers. La dĂ©tention d’actifs numĂ©riques, y compris les stablecoins et les NFT, implique un niveau de risque Ă©levĂ© et leur valeur peut considĂ©rablement fluctuer. Examinez soigneusement votre situation financiĂšre pour dĂ©terminer si le trading ou la dĂ©tention d’actifs numĂ©riques vous convient.