Dual Governance security review
Statemind reviewed Lido (Dual Governance security review) on 25 Oct 2024: 46 findings, 0 critical; 32 marked fixed, 14 acknowledged.
Findings46
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 0 |
| Medium | 0 | 1 | 3 |
| Low | 0 | 13 | 29 |
MediumInfinity approval to Withdrawal Queue may present problems for Escrow and DG systemAcknowledged
The report gives no description here.
LowAdd system limit for number of proposersAcknowledged
The report gives no description here.
LowCheck for proposal.status in ExecutableProposals._isProposalMarkedCancelled() is required only in one caseAcknowledged
The report gives no description here.
LowChecking arrays' lengthAcknowledged
The report gives no description here.
LowEmergency protection can last longer than MAX_EMERGENCY_PROTECTION_DURATIONAcknowledged
The report gives no description here.
LowEnsure that updating DualGovernance.configProvider doesn't affect the current state of DualGovernanceStateMachineAcknowledged
The report gives no description here.
LowRage Quit support changes due to stETH rebalancesAcknowledged
The report gives no description here.
LowRe-writing address of the Rage EscrowAcknowledged
The report gives no description here.
LowRedundant governance config validity checkAcknowledged
The report gives no description here.
LowRedundant nonce checkAcknowledged
The report gives no description here.
Show 4 more
LowSanity check for Emergency governance and usual GovernanceAcknowledged
The report gives no description here.
LowSanity check for timelock delaysAcknowledged
The report gives no description here.
LowSanity checks for Emergency committeesAcknowledged
The report gives no description here.
LowUsers can unlock only the entire balanceAcknowledged
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of Lido’s security record
LidoSecurity firm
1 project reviewed · 11 reports · latest Jun 2026
See Statemind’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us