Proposal: Recovering 51.36 + 30.42 ETH paid to Lido validators

[lobanov]

Hello everyone!
I’ll try to put it short and straight to the point.
I was running my 25 validators at a major staking platform for roughly 18 months, not Lido though. Then my withdrawal address got compromised as a result of “Mysterious MetaMask hack” - MetaMask Security Monthly May 2023
YouTube 5aorTaCD5vI
For the last 9 months it was a struggle to rescue my rewards and validators as well. Basically every attempt to rescue 32 ETH from a validator was a challenge and a mental torture for me. Some were lost and some were successfully rescued. For all these time attacker(s) run different versions of sweeper scripts and it left some space to outsmart them.
Anyway when I got left less than 20 validators still running I asked MEVRefunder aka Flashbots Whitehat for help. It has been decided to exit all remaining validators at once in order not to provoke hackers to raise txn fees for every new batch. At this time it has been clear that the gas war would be necessary (…and it’s the only way basically) to rescue my assets. I couldn’t wait indefinitely long as with the new update the attackers could have used withdrawal address PK to exit the validators on their own.
As a result of gas war MEV bot was able to rescue less than 18% of my stake…
Some portion of the transaction fees that were burnt in order to win the transaction has been paid to Lido validators:

51.36 ETH and 30.42 ETH to Lido

0xb265f672e1fed8ed00679b6bce5f6e44d9f428284a94d5884ec77b50d20b066c
0x0ab9e37dc85a711c9ed3f24237be397afc6183f892be8576f454dded69f47b46

I know there were cases when community voted positively for the similar proposals to recover stolen or lost funds: proposal-re-recovering-10-eth-help-support-please (4784)
The losses have been devastating for me. I was an early Ethereum miner with ~550 GPUs and it was extremely challenging to run and maintain that farm mostly by myself.
I am also a validator and there were occasions when I received around 1.55 ETH one time as a result of a completed block (I would gladly refuse from such rewards if they were obtained at the expense of somebody like in my case).

I will provide more comments/explanations/proofs shall it be needed.

Any help and support is greatly appreciated.

Thanks!

[irina_everstake]

Hello! Can you please provide the proof of the statement below:

@lobanov

I know there were cases when community voted positively for the similar proposals to recover stolen or lost funds: proposal-re-recovering-10-eth-help-support-please (4784)

I have checked all the Snapshot votings during the period of the abovementioned proposal (begging of 2023) and there was NO voting on it. On the contrary, the proposal with the same aim (A decision on an outflow of 39.8 ETH from the Lido DAO treasury to aid in the Sushi recovery (restart)) neither got DAO support, nor reached the quorum to be accepted:

• No action: 99.23%
• Send 39.8 ETH to sifuvision.eth: 0.77%

I have a full empathy to the situation you faced, but it opens a Pandora box for a bunch of cases with exploits, MEV, wrong tx, etc. and put Lido in risk of constant compensations, although it should not. Hasu summarised this perfectly earlier:

@Hasu

A similar situation happened recently, where a Sushiswap trader lost money by authorizing a bad transaction and then approached LidoDAO about it (Thread 1 , Thread 2 .) LidoDAO did not vote to send money to the trader and should do the same in this one.

Fact is, the funds in the EL rewards vault don’t belong to LidoDAO but to stakers, and the DAO has no control over them. Acting as an arbitrator between third parties who lost money to MEV and stakers would be highly problematic for Lido for three reasons:

1. An MEV arbitration policy opens a significant attack surface on Lido.
2. Lido is neutral middleware.
3. Lido should minimize the role of governance.

For the full arguments, please read the threads linked above.

[lobanov]

@lobanov

Hi there,
The proposal I was initially referring in the description is the following (should be able to google for it using the keywords as I cannot paste links yet):
research~lido~fitproposal-re-recovering-10-eth-help-support-please*4784

Here’s the similar case with only that difference that I chose to do it through MEVRefunder instead of bloXroute’s (they offer the same solution of rescuing as the Flashbots do)
snapshot~org*#lido-snapshot~ethproposal*0x9d39cc7ed918e89cff5a597ff1e0bce0974f5721283dcac6ccc8274bde703d1f

Hi there,
The proposal I was initially referring in the description is the following (should be able to google for it using the keywords as I cannot paste links yet):

Proposal re recovering 10 eth - help / support please

Hello everyone - first post. I am starting this threat to look for support in navigating this situation, and for conversation if a Snapshot follows from it (which I am hoping will follow). On 9 May, I made a terrible mistake and transferred $19,970 in USDT out of my metamask wallet. I thought I was sending it to my hardware wallet, but mistakenly sent it to the Uniswap V3: Router 2 smart contract - txn 0x427 . This is a lot of money for me and my family. It’s cringy, but I was moving the mone…

Here’s the similar case with only that difference that I chose to do it through MEVRefund instead of bloXroute’s (they offer the same solution of rescuing as the Flashbots do)
https://snapshot.box/#/s:lido-snapshot.eth/proposal/0x9d39cc7ed918e89cff5a597ff1e0bce0974f5721283dcac6ccc8274bde703d1f

[lobanov]

@Hasu

ido should minimize the role of governanc

1. That’s why I am trying to reach to stakers
2. Posting here on DAO is the only way to do it as far as I understand. Otherwise there should be a mechanism to do that outside DAO
3. There were precedents when LIDO refunded wrongfully sent ETH before

Hackers just did two fraudulent transfers out of my address to LIDO and everybody sees any issues…