Lido Engineering Lead Warns: Staking Deposit Hijacking Risk During Ethereum Glamsterdam Upgrade Transition
On October 20, citing Crypto Briefing, Lido engineering lead Dima Gusakov disclosed that delegated staking protocols face a front-running attack risk during the Ethereum Glamsterdam hard fork transition. Glamsterdam will introduce builder deposits using 0xB0-prefixed withdrawal credentials. Around the fork, these deposits will share the deposit queue with validator deposits, allowing malicious node operators to seize stakers' funds so they are credited to the attacker's builder account, while the corresponding validator cannot be activated. The related fix proposal (consensus-specs #5735) has been closed as "not planned," and defense requires each staking protocol to perform its own pre-deposit checks.Glamsterdam will be activated on the Hoodi testnet in the early hours of October 27, with the mainnet scheduled to go live in Q4.