Nearly $22B in ETH is staked via @LidoFinance. Today, we’re glad to announce that Lido has completed the Web3SOC assessment, covering ope…
Nearly $22B in ETH is staked via @LidoFinance. Today, we’re glad to announce that Lido has completed the Web3SOC assessment, covering operational, financial, security, and compliance domains across Lido DAO and the Lido protocol. https://t.
Grace Ops
triage-ready iocs + detections
fresh
1
IOC Workbench
typed indicators with fast copy and export actions
3 total
uhttps://t.
uhttps://x.com/cantinasecurity/status/2052019835606102317
dx.com
3 indicators staged for handoff.
2
Rule Studio
starter detections generated from this IOC set
2 formats
!Draft output: validate and tune before production rollout.
sigmadraft
title: AHackaday IOC starter detection
id: ahackaday-2026-05-06-nearly-22b-in-eth-is-staked-via-lidofinance-today-we-re-glad-to-announce-that-li-1d7a84e9
description: IOC starter rule for Nearly $22B in ETH is staked via @LidoFinance. Today, we’re glad to announce that Lido has completed the Web3SOC assessment, covering ope…
status: experimental
author: ahackaday
logsource:
product: network
detection:
selection_iocs:
- "https://t."
- "https://x.com/cantinasecurity/status/2052019835606102317"
- "x.com"
condition: selection_iocs
falsepositives:
- unknown
level: medium
coverage
yaradraft
rule ahackaday_2026_05_06_nearly_22b_in_eth_is_staked_via_lidofinance_today_we_re_glad_to_announce_that_li_1d7a84e9
{
meta:
description = "IOC starter for Nearly $22B in ETH is staked via @LidoFinance. Today, we’re glad to announce that Lido has completed the Web3SOC assessment, covering ope…"
author = "ahackaday"
strings:
$ioc1 = "https://t." nocase
$ioc2 = "https://x.com/cantinasecurity/status/2052019835606102317" nocase
$ioc3 = "x.com" nocase
condition:
any of them
}
coverage
3
Response Tracks
fast operational tracks from this incident snapshot
4 tracks
source-backed 1 refs
audit trail / provenance0
Provenance
Claims tie surfaced fields back to sources, models, or heuristics.
No structured claims yet — severity uplift rationale still applies below.
What changed
Append-only revisions when ingest or analysts evolve the record.
No revision rows stored yet.
Sources
Curated May 06, 2026 by the ahackaday team./Sources verified./Brief grounded in 1 source.
discussion
Sign in to join the thread and vote on comments.
Loading comments…