MEV-Boost relay allowlist Security security review

Statemind9 Sep 2022Code version: not recorded (see the report)

Statemind reviewed Lido (MEV-Boost relay allowlist Security security review) on 9 Sep 2022: 7 findings, 0 critical; 5 marked fixed, 2 acknowledged.

No open critical findings

Open the report Open Lido’s security record

Report hosted on GitHub.

Trustblock does not review code.

Findings7

Statuses are the security firm’s own, from its report.

Severity	Open	Acknowledged	Fixed
Critical	0	0	0
High	0	0	0
Medium	0	0	0
Low	0	2	5

LowAddress of a recipient in ERC20Recovered might be indexed.Fixed

The report gives no description here.

LowEvent name RelaysUpdated is ambiguousFixed

The report gives no description here.

LowFunction _safe_erc20_transfer() doesn't revert if token is not a contractFixed

The report gives no description here.

LowGas optimisationFixed

The report gives no description here.

LowInaccurate NatSpec commentsFixed

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Part of Lido’s security record

Lido

Audits53 audits by 13 firmsLast audit Sep 2026, by Composable Security.

Critical findings2 criticals acknowledged, not fixedReported in 2 reports, the latest by Statemind, Apr 2023. The team acknowledged both.

Open Lido’s security record

Security firm

Statemind

1 project reviewed · 11 reports · latest Jun 2026

See Statemind’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.