Who earned more during the two days of the theft?

SlowMist's Cosine calculated that Lido's 7-day average APR rose from 2.2% to 4.2%—nearly doubling.

As attackers raced to move funds on-chain, execution-layer rewards were pushed up, giving stETH holders a little extra.