ethdo VS yearn-security

You can check the parameters you are sending to the Abyss contract and makes sure the withdrawal_credentials field contains your withdrawal address(es). Pick one of the successful transactions on the Abyss contract on etherscan and then click show more details. Then press the "Decode Input Data" button and you can see withdrawal_credentials details. So you can check these fields in Meta Mask (or your hardware signing wallet) to make sure this field is set with your correct withdrawal address(es). If you want to check the entire message is correct, then you can use a tool like ETHDo.

You should contact staked.us support. You cannot configure the derivation path with Wagyu Key Gen. It uses the default and most common derivation path. ethdo is a tool that can be used to use a custom derivation path. See https://github.com/wealdtech/ethdo/blob/master/docs/usage.md

ethdo still works fine for creating wallets.

No. ethdo can. See https://github.com/wealdtech/ethdo/blob/master/docs/usage.md

https://github.com/wealdtech/ethdo/blob/master/docs/changingwithdrawalcredentials.md here you go, ethdo is perfectly legit, but also very powerful tool, be careful and godspeed

It looks like the the 'Advanced Operation' of ethdo lets you change your validators' withdrawal credentials individually.

Since they're less popular than Yearn, their bug bounty is smaller (max 50k USD compared to max 200k USD for yearn), so there's probably less security researchers looking for bugs.

The issue was patched.

Post mortem link: https://github.com/iearn-finance/yearn-security/blob/master/disclosures/2021-02-04.md

Surely this killed any momentum yesterday: https://github.com/iearn-finance/yearn-security/blob/master/disclosures/2021-02-04.md