According to Odaily, Defillama founder 0xngmi revealed on the X platform that a hacker managed to infiltrate one of the addresses in Lido's oracle multisig, stealing 1.4 ETH before being detected. 0xngmi suggested that placing some simple coins in multisig wallets could serve as a warning system, alerting users when the wallet is compromised. Previously, Lido DAO initiated an emergency proposal to replace the oracle node suspected of having a leaked private key.