The Lido DAO Launches Emergency Vote to address a security breach that compromised a Chorus One-managed oracle, resulting in the theft of 1.46 ETH. On May 11, 2025, Lido DAO, the decentralized organization governing Ethereum’s leading liquid staking protocol, detected the issue and swiftly activated its governance process. This article explores the oracle hack, Lido’s proactive measures, and the implications for its ecosystem and the broader DeFi landscape.
Oracle Breach Sparks Urgent Governance
The Lido DAO Launches Emergency Vote after a community member noticed an unauthorized withdrawal of 1.46 ETH from a hot wallet linked to a Chorus One oracle. Investigations revealed that a private key, created in 2021 under less stringent security standards, was likely compromised. Chorus One confirmed the breach was isolated, with no evidence of broader system vulnerabilities or software issues. To mitigate risks, Chorus One deployed a new server with enhanced security protocols and conducted a thorough audit of its infrastructure.
Lido’s oracle system uses a 5-of-9 quorum model, requiring five signatures to update smart contracts. This ensured that critical functions, including stETH rebase, ETH withdrawals, and fee adjustments, remained unaffected. The breach caused minor delays in stETH data updates, slightly impacting DeFi users with leveraged positions, but most retail users experienced negligible effects. The swift detection and containment of the incident highlight Lido’s robust security and decentralized governance.
Lido’s Governance in Action
The Lido DAO Launches Emergency Vote to replace the compromised oracle key across three key smart contracts: Accounting Oracle, Validators Exit Bus Oracle, and Consensus Layer Fee Oracle. A new, highly secure key was generated and proposed for integration. The voting process, spanning 72 hours with a 48-hour objection period, reflects Lido’s commitment to transparent governance. Early community feedback indicates strong support for the key rotation, reinforcing trust in Lido’s decentralized model.
Lido and Chorus One committed to releasing a detailed post-mortem report to outline the breach’s cause and preventive measures. This transparency has helped maintain community confidence. Online discussions praise Lido’s rapid response, noting the 5-of-9 quorum as a critical safeguard. The urgent governance action underscores the strength of decentralized autonomous organizations in addressing security challenges effectively.
Lido’s Market Resilience
Despite the oracle breach, Lido remains the second-largest DeFi protocol, with a total value locked (TVL) of $22.88 billion, trailing only Aave. Over the past 30 days, Lido’s TVL surged by 54.71%, driven by strong demand for liquid staking. In the 24 hours following the breach, TVL dipped by just 0.27%, signaling robust investor confidence. The LDO token experienced a modest 3.6% decline, trading at $1.09, suggesting the market views the incident as a contained issue.
Discover: Top DeFi Projects 2025: Where to Invest Your Crypto?
Community sentiment highlights Lido’s resilience. The protocol’s ability to maintain core operations during the breach underscores its technical strength. The incident has prompted broader discussions about securing legacy hot wallets in DeFi, with Lido setting an example through its proactive audits and upgrades. The minimal market impact reflects the trust Lido has built within its ecosystem.
Implications for DeFi Security
The Lido DAO Launches Emergency Vote serves as a case study in decentralized crisis management. The breach, though minor in financial impact, exposes vulnerabilities in older security practices. Lido’s quorum-based oracle system prevented broader damage, offering a model for other DeFi protocols. The incident may encourage projects to adopt multi-signature systems and prioritize regular security reviews to mitigate risks.
Lido’s liquid staking model, enabling users to stake ETH and receive stETH for DeFi applications, continues to drive adoption. The protocol’s ability to handle this crisis without disrupting staker funds strengthens its reputation. Community feedback suggests the upcoming post-mortem report will influence future security practices, potentially shaping standards across the DeFi sector.
Future Outlook for Lido

LDO price fluctuation over the past 24 hours, screenshot from CoinGecko at 3 PM on May 12, 2025.
The Lido DAO Launches Emergency Vote positions Lido to emerge stronger from this incident. Enhanced security measures and transparent reporting will bolster user trust. Lido’s governance model, empowering LDO token holders, proves effective in managing crises. As DeFi matures, Lido’s response sets a benchmark for balancing innovation and security, reinforcing its leadership in Ethereum staking.
The incident highlights the need for continuous security improvements in DeFi. Lido’s planned upgrades to oracle key management and hot wallet protocols will likely mitigate future risks. The protocol’s ability to maintain its $22.88 billion TVL and stabilize LDO token prices amid a security scare reflects its strong community backing and operational resilience.
Conclusion
The Lido DAO Launches Emergency Vote demonstrates the power of decentralized governance in addressing security threats. The oracle breach, costing 1.46 ETH, was swiftly contained, preserving Lido’s $22.88 billion TVL and LDO token stability. With ongoing audits, a commitment to transparency, and robust liquid staking offerings, Lido reinforces its position as a DeFi leader. This incident underscores the importance of proactive security measures, paving the way for a more resilient decentralized finance ecosystem.