PANews October 20 news, according to Crypto Briefing, Lido engineering lead Dima Gusakov disclosed that during the Ethereum Glamsterdam hard fork transition, delegated staking protocols face front-running attack risks. Glamsterdam will introduce builder deposits using 0xB0-prefixed withdrawal credentials. Before and after the fork, such deposits will share the deposit queue with validator deposits, allowing malicious node operators to front-run stakers' funds so that they are credited to the attacker's builder account, while the corresponding validators cannot be activated. The related fix proposal (consensus-specs #5735) has been closed as "not planned," and defense requires each staking protocol to perform pre-deposit checks on its own. Glamsterdam will activate on the Hoodi testnet in the early hours of October 27, with mainnet launch planned for the fourth quarter.
Makala / PANews