Don't want to trade it yourself?
Our desk runs DEX portfolios on profit share.
Lido engineering lead Dima Gusakov warned that users’ deposited ETH could be stolen in some delegated staking protocols ahead of Ethereum’s Glamsterdam hard fork, according to Crypto Briefing.
Gusakov said the upgrade will introduce a new withdrawal credential, 0xB0, for block builders’ deposits. As builder and validator deposits pass through the same queue before the upgrade, a malicious node operator could assign a user’s ETH to the operator’s own builder account first, Gusakov said. In that case, the user’s validator would remain inactive while the deposit is diverted, Gusakov warned.
Crypto Briefing said Ethereum core developers did not adopt a protocol-level pre-deposit verification measure to prevent the issue. As a result, individual staking protocols need to implement their own verification safeguards, according to the report.
Glamsterdam is scheduled to be deployed on the Hoodi testnet on Oct. 26, while a mainnet deployment date has not been decided.