Lido node operator InfStones agrees to rotate validator keys after vulnerability disclosure

ChainCatcher news, according to The Block, Lido Finance core node operator InfStones will temporarily withdraw its Ethereum validators from the liquid staking protocol and implement key rotation in response to a vulnerability discovered by security researchers at dWallet Labs.

The vulnerability is related to the open-source library Tailon, which was reported to InfStones in July 2023 and has now been resolved. Nevertheless, this incident led to the implementation of precautionary security measures. Lido Finance confirmed that the vulnerability was related to potential root-level access affecting 25 InfStones validator servers, but there is no evidence that this issue resulted in any key leaks or exploitation.