According to PANews, Lido has announced on the X platform that it has reported and resolved a security vulnerability related to Lido CSM and the permissionless validator contract used for validator withdrawals. The vulnerability was not exploited, and no CSM node operators or stETH holders were affected. As part of the resolution, a mitigation strategy through an oracle solution, which involved disabling the bond destruction feature, was implemented alongside DAO vote proposal number 190. Lido has rewarded the white-hat hacker who disclosed the issue through the Lido×Immunefi project with a bounty.