Online reports that Lido issued a security disclosure on the X platform: Vulnerability related to Lido CSM and the unlicensed verifier contract used to verify verifier withdrawals have been reported and fixed. The vulnerability was not exploited and no CSM node operators were affected. StETH holders were also not affected in any way. As part of the fix, bug fixes were implemented through a oracle mitigation plan (disabling bond destruction) and DAO voting on Proposition 190. Lido has paid a vulnerability bounty to white-hat hackers who disclosed the issue through the Lido×Immunefi project.