Though the attacker was able to drain the oracle address's ETH balance (which was purposely held at a low level, Chorus One said), the attack didn't threaten Lido's operations, as its protocol reporting oracles require a 5-of-9 consensus.