Lido engineering lead Dima Gusakov has warned that delegated staking protocols face a front-running attack risk during the upcoming Ethereum Glamsterdam hard fork transition. The upgrade introduces builder deposits using 0xB0-prefixed withdrawal credentials, which will share the deposit queue with validator deposits around the fork period. Malicious node operators could exploit this overlap to hijack stakers' funds by crediting them to an attacker's builder account while preventing the corresponding validator from activating. The fix proposal (consensus-specs #5735) addressing this vulnerability has been closed as "not planned," meaning each staking protocol must implement its own pre-deposit checks for defense. Glamsterdam is scheduled to activate on the Hoodi testnet in the early hours of October 27, with mainnet deployment planned for Q4.