LSD Protocol unshETH Deployer Private Key Compromised, Withdrawal Paused

The unshETH protocol announced on Twitter that around 14:00 UTC on May 31, one of the deployment keys of the unshETH contract was compromised. Out of caution, emergency suspension of unshETH ETH withdrawals is in place.

"Given our security model, unshETH Ether deposits ($35m tvl) are secured with multisig + timelock and are not at risk."

In addition, some ancillary protocol contracts (farms, cross-chain bridges, etc.) are compromised and the team are working with security experts from Coinbase, Stargate, Paladin Blockchain Security, Github, and ogle to ensure the safety of user funds and expect the scope of impact to be limited.

Meanwhile, the team has contacted the hacker, attempting to negotiate the return of funds and contract ownership to limit the impact on existing users.