Lido security record
As of 29 Oct 2026, Lido has 53 audit reports by 13 security firms on Trustblock; the latest is by Composable Security, dated 9 Sep 2026. Those reports list 2 criticals acknowledged and not fixed.
Record last updated . It holds audits and findings, contracts and incidents up to Oct 2026. Trustblock does not review code.
Audits53
Newest first
1 other security report listed, not counted
| Audit | Security firm | Date | Scope | Critical findings | Report |
|---|---|---|---|---|---|
| Lido Oracle V8_1 security review | Security firm: Composable Security | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| Lido NEST | Security firm: ack3 | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| Lido CSM v3 and CM v2 security review | Security firm: Statemind | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| Lido Oracle V8 security review | Security firm: Composable Security | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| Lido Circuit Breaker Audit Report | Security firm: Cyfrin | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| Lido PR 85 - Bytecode Verification | Security firm: Cantina | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · cantina.xyz |
| Lido CSM v3 and CM v2 audit | Security firm: Certora | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| Lido Vault Wrapper | Security firm: Ackee Blockchain Security | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| Lido V3 Formal verification · firm’s term: formal verification | Security firm: Certora | Date: | Scope: Not recorded (see the report) | 1 critical finding, fixed | Open · GitHub |
| Lido security review | Security firm: Sigma Prime | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| Lido Vault Middleware Audit Report | Security firm: Cyfrin | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| Lido Stonks 2. | Security firm: Ackee Blockchain Security | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| Lido Oracle V7 security review | Security firm: Composable Security | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| Lido V3 Oracle V7 | Security firm: Certora | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| Triggerable Withdrawals and CSM v2 security review | Security firm: Statemind | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| Lido Triggerable Withdrawals | Security firm: Ackee Blockchain Security | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| Lido Csm V2 | Security firm: Ackee Blockchain Security | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| Lido Oracle V6 security review | Security firm: Composable Security | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| Lido Community Staking Module audit (April 2025) | Security firm: Ackee Blockchain Security | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| Lido Oracle v5 04-25 security review | Security firm: Composable Security | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| Lido Dual Governance re-audit Version of an earlier report: counted once with it | Security firm: OpenZeppelin | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| Lido DG Audit · Includes formal verification | Security firm: Certora | Date: | Scope: Not recorded (see the report) | 2 critical findings, fixed | Open · GitHub |
| Launchnodes Lido Liquid Staking | Security firm: OXORIO | Date: | Scope: Files named in the report | 6 critical findings, fixed | Open · audits.oxor.io |
| Lido Dual Governance audit Audit · firm’s term: audit | Security firm: OpenZeppelin | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| Dual Governance security review | Security firm: Statemind | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
Findings591
Statuses are the security firm’s own, from each report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 2 | 12 |
| High | 0 | 3 | 32 |
| Medium | 0 | 20 | 73 |
| Low | 1 | 160 | 288 |
LowMissing DocstringsLido Dual Governance audit · OpenZeppelin · 19 Nov 2024Open
The report gives no description here.
Open the reportContracts
No deployed address is recorded for these audits.
The reports name a repository or files. Open a report to see its scope.
Show this on your site
Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.
Content
Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.
Style
Format
<head><script src="https://widget.trustblock.run/project-widget.min.js" defer></script></head><body><divdata-tb-project-widgetdata-tb-project-slug="lido"></div></body>
Paste the code where the label should appear. It uses no API credit and updates by itself.
Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us