Lido security record
As of 24 Oct 2026, Lido has 53 audit reports by 13 security firms on Trustblock; the latest is by Composable Security, dated 9 Sep 2026. Those reports list 2 criticals acknowledged and not fixed.
Record last updated . It holds audits and findings, contracts and incidents up to Oct 2026. Trustblock does not review code.
Audits53
Newest first
1 other security report listed, not counted
| Audit | Security firm | Date | Scope | Critical findings | Report |
|---|---|---|---|---|---|
| Lido Community Staking Module audit (October 2024) | Security firm: Ackee Blockchain Security | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| Zircuit / Lido / NEW Proposal | Security firm: Quantstamp | Date: | Scope: Files named in the report | No open critical findings | Open · certificate.quantstamp.com |
| Lido Staking Router V2 | Security firm: Ackee Blockchain Security | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| Lido Simple Delegation | Security firm: Ackee Blockchain Security | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| LIP-23: Rebase Check Smart Contracts | Security firm: ChainSecurity | Date: | Scope: Files named in the report | No open critical findings | Open · chainsecurity.com |
| Lido Steth Optimism | Security firm: Ackee Blockchain Security | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| Lido Simple Delegation security review | Security firm: Statemind | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| Lido Stonks | Security firm: Ackee Blockchain Security | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| Lido Simple DVT Easy Track Factories security revi | Security firm: Statemind | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| Lido EasyTrack | Security firm: OXORIO | Date: | Scope: Repository at commit 425f4a2 | No open critical findings | Open · audits.oxor.io |
| Lido V2 Upgrade Template security review | Security firm: Statemind | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| Lido V2 on chain | Security firm: OXORIO | Date: | Scope: Repository at commit e45c4d6 | No open critical findings | Open · IPFS |
| Lido V2 security review | Security firm: Statemind | Date: | Scope: Not recorded (see the report) | 1 critical acknowledged, not fixed | Open · GitHub |
| GateSeals security review | Security firm: Statemind | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| Lido security review | Security firm: Hexens | Date: | Scope: Not recorded (see the report) | 1 critical finding, fixed | Open · GitHub |
| Lido on Polygon RequestWithdraw Fix | Security firm: OXORIO | Date: | Scope: Repository at commit da2e7ee | 1 critical finding, fixed | Open · audits.oxor.io |
| Lido dc4bc security assessment (v2. | Security firm: Sigma Prime | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| Lido Staking Router | Security firm: ChainSecurity | Date: | Scope: Files named in the report | No open critical findings | Open · chainsecurity.com |
| TRP Vesting Escrow security review | Security firm: Statemind | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| Easy Track Payment Processor with limits 09-2022 s | Security firm: Statemind | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| MEV-Boost relay allowlist Security security review | Security firm: Statemind | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| Lido V1 | Security firm: ChainSecurity | Date: | Scope: Files named in the report | No open critical findings | Open · chainsecurity.com |
| Lido Governance Crosschain Bridges | Security firm: OXORIO | Date: | Scope: Repository at commit 8fa25b0 | No open critical findings | Open · audits.oxor.io |
| Lido L2 | Security firm: OXORIO | Date: | Scope: Repository at commit 082e7eb | 1 critical acknowledged, not fixed | Open · audits.oxor.io |
| Lido Jumpgate | Security firm: OXORIO | Date: | Scope: Repository at commit 0802ae1 | No open critical findings | Open · audits.oxor.io |
Findings591
Statuses are the security firm’s own, from each report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 2 | 12 |
| High | 0 | 3 | 32 |
| Medium | 0 | 20 | 73 |
| Low | 1 | 160 | 288 |
CriticalLocked value not updated when tier changes reserve requirementsLido V3 · Certora · 10 Jan 2026Fixed
The report gives no description here.
Open the reportCriticalDOS on Proposers.sol::unregister due to the last proposer's ExecutorData not getting updatedLido DG · Certora · 5 Feb 2025Fixed
The report gives no description here.
Open the reportCriticalEvading the RageQuit's second sealLido DG · Certora · 5 Feb 2025Fixed
The report gives no description here.
Open the reportCriticalContract lock risk on initial stake in NGOLisLaunchnodes Lido Liquid Staking · OXORIO · 13 Dec 2024Fixed
The report gives no description here.
Open the reportCriticalDecrease in stETH balance due to slashing or penalties is not accounted for in NGOLisLaunchnodes Lido Liquid Staking · OXORIO · 13 Dec 2024Fixed
The report gives no description here.
Open the reportCriticalRounding during division leads to accumulation of undistributed rewards on the contract in NGOLisLaunchnodes Lido Liquid Staking · OXORIO · 13 Dec 2024Fixed
The report gives no description here.
Open the reportCriticalThe setImplementetion function is executed without authorization in NGOLisFactoryLaunchnodes Lido Liquid Staking · OXORIO · 13 Dec 2024Fixed
The report gives no description here.
Open the reportCriticalUnrestricted withdrawal of small stETH/wstETH amounts in NGOLisLaunchnodes Lido Liquid Staking · OXORIO · 13 Dec 2024Fixed
The report gives no description here.
Open the reportCriticalWithdrawal of more ETH from the protocol than returned by Lido in NGOLisLaunchnodes Lido Liquid Staking · OXORIO · 13 Dec 2024Fixed
The report gives no description here.
Open the reportCriticalReentrancy in depositing buffered etherLido V2 security review · Statemind · 28 Apr 2023Fixed
The report gives no description here.
Open the reportShow 10 more
CriticalSTEALING ETH USING DISCOUNT FACTOR BY PASSLido security review · Hexens · 14 Apr 2023Fixed
The report gives no description here.
Open the reportCriticalIncorrect recovery of totalBuffered parameter in StMaticLido on Polygon RequestWithdraw Fix · OXORIO · 24 Mar 2023Fixed
The report gives no description here.
Open the reportHighMissing pending top ups in CL pending balance calculationLido Oracle V8 security review · Composable Security · 24 Jun 2026Fixed
The report gives no description here.
Open the reportHighUndercollateralized mint of stETHLido Oracle V7 security review · Composable Security · 12 Dec 2025Fixed
The report gives no description here.
Open the reportHighDouble Counting of end-of-frame block When Calculating Liquidity FeesLido V3 Oracle V7 · Certora · 10 Dec 2025Fixed
The report gives no description here.
Open the reportHighNegative APR Leads to DOSLido V3 Oracle V7 · Certora · 10 Dec 2025Fixed
The report gives no description here.
Open the reportHighDeposits denial of serviceLido Csm V2 · Ackee Blockchain Security · 16 Sep 2025Fixed
The report gives no description here.
Open the reportHighIncorrect enqueued keys accountingLido Csm V2 · Ackee Blockchain Security · 16 Sep 2025Fixed
The report gives no description here.
Open the reportHighcancelAllPendingProposals() is callable in any stateLido DG · Certora · 5 Feb 2025Fixed
The report gives no description here.
Open the reportHighgetVetoerState() doesn't return the right unstETHLockedShares valueLido DG · Certora · 5 Feb 2025Fixed
The report gives no description here.
Open the reportShow 10 more
HighGriefing _batchesQueue.close()Lido DG · Certora · 5 Feb 2025Fixed
The report gives no description here.
Open the reportHighRageQuit can fail to start even after the threshold have passed by frontrunLido DG · Certora · 5 Feb 2025Fixed
The report gives no description here.
Open the reportHighRageQuit is DOS-d if the minimum amount of stEth to withdraw is 0Lido DG · Certora · 5 Feb 2025Fixed
The report gives no description here.
Open the reportHightieBreakerResumeSealable has no call to activateNextState before checking for a tieLido DG · Certora · 5 Feb 2025Fixed
The report gives no description here.
Open the reportHighIncorrect update of lastNGOBalance in NGOLisLaunchnodes Lido Liquid Staking · OXORIO · 13 Dec 2024Fixed
The report gives no description here.
Open the reportHighRisk of Zero Calculation for Low _ratio and _ngoAssets in NGOLisLaunchnodes Lido Liquid Staking · OXORIO · 13 Dec 2024Fixed
The report gives no description here.
Open the reportHighUnderflow occurring during validator slashing events in NGOLisLaunchnodes Lido Liquid Staking · OXORIO · 13 Dec 2024Fixed
The report gives no description here.
Open the reportHighUnderflow when attempting to withdraw asset from prevRewards in NGOLisLaunchnodes Lido Liquid Staking · OXORIO · 13 Dec 2024Fixed
The report gives no description here.
Open the reportHighUnwithdrawable balance after withdrawal in NGOLisLaunchnodes Lido Liquid Staking · OXORIO · 13 Dec 2024Fixed
The report gives no description here.
Open the reportHighIncorrect require leads to DOSLido V2 security review · Statemind · 28 Apr 2023Fixed
The report gives no description here.
Open the reportShow 10 more
HighNot matching interfaceLido V2 security review · Statemind · 28 Apr 2023Fixed
The report gives no description here.
Open the reportHighStaking module can block withdrawal credential changing and oracleLido V2 security review · Statemind · 28 Apr 2023Fixed
The report gives no description here.
Open the reportHighWithdrawal NFT burning after transfer to selfLido V2 security review · Statemind · 28 Apr 2023Fixed
The report gives no description here.
Open the reportHighWrong NFT balanceLido V2 security review · Statemind · 28 Apr 2023Fixed
The report gives no description here.
Open the reportHighZero deposits allocation after the pause the one of staking modulesLido V2 security review · Statemind · 28 Apr 2023Fixed
The report gives no description here.
Open the reportHighVyper compiler bugGateSeals security review · Statemind · 20 Apr 2023Fixed
The report gives no description here.
Open the reportHighBAD ACTOR CAN BLOCK LIDO DEPOSIT FUNCTIONLido security review · Hexens · 14 Apr 2023Fixed
The report gives no description here.
Open the reportHighSHARE RATE CAN BE NEGATIVELY INFLUENCED DUE TO SHARES BURN LIMITLido security review · Hexens · 14 Apr 2023Fixed
The report gives no description here.
Open the reportHighWITHDRAWAL REQUEST FINALISATION WILL ALWAYS REVERTLido security review · Hexens · 14 Apr 2023Fixed
The report gives no description here.
Open the reportHighStaking Rewards Incorrect TrimmingLido Staking Router · ChainSecurity · 3 Feb 2023Fixed
The report gives no description here.
Open the reportShow 10 more
HighUser may loose their funds if msg.value, maxGas_ or gasPriceBid_ is lowLido L2 · OXORIO · 21 Jul 2022Fixed
The report gives no description here.
Open the reportHighrecoverERC20 will revert for some tokensLido Jumpgate · OXORIO · 4 May 2022Fixed
The report gives no description here.
Open the reportHighAttackers can make submit and requestWithdraw fail with out-of-gasFixed
The report gives no description here.
HighDOS via Uninitialized EasyTrack Implementation ContractFixed
The report gives no description here.
MediumExternal operator data length mismatch between on-chain and off-chainLido Oracle V8 security review · Composable Security · 24 Jun 2026Fixed
The report gives no description here.
Open the reportMediumIncorrect slashings ring buffer projection can under-estimate midterm slashing penaltyLido Oracle V8 security review · Composable Security · 24 Jun 2026Fixed
The report gives no description here.
Open the reportMediumInfinite loop in get_node_operator_weight if dormant curated module weight branch is enabledLido Oracle V8 security review · Composable Security · 24 Jun 2026Fixed
The report gives no description here.
Open the reportMediumIntra-frame CL rebase correction ignores pending top-ups on existing validatorsLido Oracle V8 security review · Composable Security · 24 Jun 2026Fixed
The report gives no description here.
Open the reportMediumInvalid type of returned valueLido Oracle V8 security review · Composable Security · 24 Jun 2026Fixed
The report gives no description here.
Open the reportMediumInvalid weights for CMv1 Node OperatorsLido Oracle V8 security review · Composable Security · 24 Jun 2026Fixed
The report gives no description here.
Open the reportShow 10 more
MediumOverstated buffered ether allocated for withdrawal finalizationLido Oracle V8 security review · Composable Security · 24 Jun 2026Fixed
The report gives no description here.
Open the reportMediumPredictable target balance includes pending consolidations whose source can be slashedLido Oracle V8 security review · Composable Security · 24 Jun 2026Fixed
The report gives no description here.
Open the reportMediumRedemptions can increase due to rounding in settlementLido V3 · Certora · 10 Jan 2026Fixed
The report gives no description here.
Open the reportMediumShortfall rebalance insufficient for vault healthLido V3 · Certora · 10 Jan 2026Fixed
The report gives no description here.
Open the reportMediumFlawed ETH/USD routingLido Stonks 2. · Ackee Blockchain Security · 12 Dec 2025Fixed
The report gives no description here.
Open the reportMediumInvalid CID for large filesLido Oracle V7 security review · Composable Security · 12 Dec 2025Fixed
The report gives no description here.
Open the reportMediumInvalid total value for predeposited validatorsLido Oracle V7 security review · Composable Security · 12 Dec 2025Fixed
The report gives no description here.
Open the reportMediumMissing Fees Calculation on VaultConnectionUpdated EventLido V3 Oracle V7 · Certora · 10 Dec 2025Fixed
The report gives no description here.
Open the reportMediumMissing IPFS CID VerificationLido V3 Oracle V7 · Certora · 10 Dec 2025Fixed
The report gives no description here.
Open the reportMedium[CSM] CSModule.getNodeOperatorSummary() does not cover all casesTriggerable Withdrawals and CSM v2 security review · Statemind · 19 Sep 2025Fixed
The report gives no description here.
Open the reportShow 10 more
MediumPenalties for invalid requestsTriggerable Withdrawals and CSM v2 security review · Statemind · 19 Sep 2025Fixed
The report gives no description here.
Open the reportMediumprocessExitDelayReport griefingLido Csm V2 · Ackee Blockchain Security · 16 Sep 2025Fixed
The report gives no description here.
Open the reportMediumNon-optimistic vetting & unbonded keys bad accountingLido Community Staking Module audit (April 2025) · Ackee Blockchain Security · 8 Apr 2025Fixed
The report gives no description here.
Open the reportMediumNode Operator can exit and slash their validator to move withdrawal finalization border epochLido Oracle v5 04-25 security review · Composable Security · 7 Apr 2025Fixed
The report gives no description here.
Open the reportMediumUncaught exception on creating ejection reportLido Oracle v5 04-25 security review · Composable Security · 7 Apr 2025Fixed
The report gives no description here.
Open the reportMediumcancelAllPendingProposals does not trigger a state transitionLido DG · Certora · 5 Feb 2025Fixed
The report gives no description here.
Open the reportMediumFront loading non-existing proposalsLido DG · Certora · 5 Feb 2025Fixed
The report gives no description here.
Open the reportMediumHashConsensus.scheduledAt is not updated when the user changes their vote from true to false to trueLido DG · Certora · 5 Feb 2025Fixed
The report gives no description here.
Open the reportMediumLack of access control for TiebreakerSubCommittee.seala bleResumeLido DG · Certora · 5 Feb 2025Fixed
The report gives no description here.
Open the reportMediumOverride proposal statusLido DG · Certora · 5 Feb 2025Fixed
The report gives no description here.
Open the reportShow 10 more
MediumQuorum change with pending votesLido DG · Certora · 5 Feb 2025Fixed
The report gives no description here.
Open the reportMediumrequestWithdrawals() can be called whenRageQuit should have startedLido DG · Certora · 5 Feb 2025Fixed
The report gives no description here.
Open the reportMediumState transition to RageQuit isn’t persisted when it should beLido DG · Certora · 5 Feb 2025Fixed
The report gives no description here.
Open the reportMediumtieBreakerScheduleProposal does not trigger a state transition which will lead to wrong state post executionLido DG · Certora · 5 Feb 2025Fixed
The report gives no description here.
Open the reportMediumuint256 rageQuitRound = Math.min(self.rageQuitRound + 1, type(uint8).max); will revert when self.rageQuitRound == type(uint8).maxLido DG · Certora · 5 Feb 2025Fixed
The report gives no description here.
Open the reportMediumEquality of minimum values for different tokens wstEth and stEth in NGOLisLaunchnodes Lido Liquid Staking · OXORIO · 13 Dec 2024Fixed
The report gives no description here.
Open the reportMediumFunction __ReentrancyGuard_init is not called during initialization in NGOLisLaunchnodes Lido Liquid Staking · OXORIO · 13 Dec 2024Fixed
The report gives no description here.
Open the reportMediumInconsistency in the calculation of userTotalShareWithNgoReward and rewardToNgo in NGOLisLaunchnodes Lido Liquid Staking · OXORIO · 13 Dec 2024Fixed
The report gives no description here.
Open the reportMediumIncorrect value in the WithdrawClaimed event in NGOLisLaunchnodes Lido Liquid Staking · OXORIO · 13 Dec 2024Fixed
The report gives no description here.
Open the reportMediumInsufficient validation of the size of _amount for withdrawal requests in NGOLisLaunchnodes Lido Liquid Staking · OXORIO · 13 Dec 2024Fixed
The report gives no description here.
Open the reportShow 10 more
MediumPossible to pass a zero _amount in NGOLisLaunchnodes Lido Liquid Staking · OXORIO · 13 Dec 2024Fixed
The report gives no description here.
Open the reportMediumPossible to receive a zero amount of shares when converting non-zero assets in NGOLisLaunchnodes Lido Liquid Staking · OXORIO · 13 Dec 2024Fixed
The report gives no description here.
Open the reportMediumProxy creation uses ERC1967Proxy instead of NGOLisProxy in NGOLisFactoryLaunchnodes Lido Liquid Staking · OXORIO · 13 Dec 2024Fixed
The report gives no description here.
Open the reportMediumStakeInfo is not updated during withdraw operations in NGOLisLaunchnodes Lido Liquid Staking · OXORIO · 13 Dec 2024Fixed
The report gives no description here.
Open the reportMediumUser does not receive rewards for staking when shares == 0 in NGOLisLaunchnodes Lido Liquid Staking · OXORIO · 13 Dec 2024Fixed
The report gives no description here.
Open the reportMediumUsers cannot withdraw stuck funds from the contract in NGOLisLaunchnodes Lido Liquid Staking · OXORIO · 13 Dec 2024Fixed
The report gives no description here.
Open the reportMediumMAX_EMERGENCY_PROTECTION_DURATION set to Incorrect ValueLido Dual Governance audit · OpenZeppelin · 19 Nov 2024Fixed
The report gives no description here.
Open the reportMediumIncorrect configuration of MAX_EMERGENCY_PROTECTION_DURATIONDual Governance security review · Statemind · 25 Oct 2024Fixed
The report gives no description here.
Open the reportMediumIncorrect deployment can break TiebreakerCoreCommitteeDual Governance security review · Statemind · 25 Oct 2024Fixed
The report gives no description here.
Open the reportMediumPossible DG state change due to unstETH finalizationDual Governance security review · Statemind · 25 Oct 2024Fixed
The report gives no description here.
Open the reportShow 10 more
MediumNon-optimistic vetting & unbonded keys bad accountingLido Community Staking Module audit (October 2024) · Ackee Blockchain Security · 12 Oct 2024Fixed
The report gives no description here.
Open the reportMediumSafeERC20 not used for approveLido Stonks · Ackee Blockchain Security · 5 Feb 2024Fixed
The report gives no description here.
Open the reportMediumMissing zero address validation for recepient leads to possible loss of fund in TopUpAllowedRecipientsLido EasyTrack · OXORIO · 18 Oct 2023Fixed
The report gives no description here.
Open the reportMediumBlocking rewards distributionLido V2 security review · Statemind · 28 Apr 2023Fixed
The report gives no description here.
Open the reportMediumNo check for return value size in isValidSignature()Lido V2 security review · Statemind · 28 Apr 2023Fixed
The report gives no description here.
Open the reportMediumNodeOperatorsRegistry keys nonce doesn't changeLido V2 security review · Statemind · 28 Apr 2023Fixed
The report gives no description here.
Open the reportMediumPossible to set stuck/exited validators count to be bigger than depositedLido V2 security review · Statemind · 28 Apr 2023Fixed
The report gives no description here.
Open the reportMediumPossible to submit report extra data in the next frame after the reportLido V2 security review · Statemind · 28 Apr 2023Fixed
The report gives no description here.
Open the reportMediumreportProcessor can have a report that doesn't reach a consensusLido V2 security review · Statemind · 28 Apr 2023Fixed
The report gives no description here.
Open the reportMediumWrong Burnt shares calculationLido V2 security review · Statemind · 28 Apr 2023Fixed
The report gives no description here.
Open the reportShow 10 more
MediumWrong burntWithdrawalsShares calculationLido V2 security review · Statemind · 28 Apr 2023Fixed
The report gives no description here.
Open the reportMediumWrong offsets for stuck and refunded validatorsLido V2 security review · Statemind · 28 Apr 2023Fixed
The report gives no description here.
Open the reportMediumFINALISATION SHARE RATE SANITY CHECK DOES NOT TAKE POSTPONED SHARE BURNING INTO ACCOUNTLido security review · Hexens · 14 Apr 2023Fixed
The report gives no description here.
Open the reportMediumINACTIVE NODE OPERATOR CAN ALWAYS BLOCK DEPOSITSLido security review · Hexens · 14 Apr 2023Fixed
The report gives no description here.
Open the reportMediumLIDO DOES NOT CHECK ACTUAL AMOUNT FROM LIDOEXECUTIONLAYERREWARDSVAU LT REWARDS WITHDRAWALLido security review · Hexens · 14 Apr 2023Fixed
The report gives no description here.
Open the reportMediumWITHDRAWALS ACCRUED REWARDS ARE NOT DISTRIBUTED AMONG STAKERSLido security review · Hexens · 14 Apr 2023Fixed
The report gives no description here.
Open the reportMediumKafka Does Not Handle JSON Errors GracefullyLido dc4bc security assessment (v2. · Sigma Prime · 1 Mar 2023Fixed
The report gives no description here.
Open the reportMediumPotential Index Out of Bounds PanicLido dc4bc security assessment (v2. · Sigma Prime · 1 Mar 2023Fixed
The report gives no description here.
Open the reportMediumreinitDKG Can Be Called Multiple Times With The Same IDLido dc4bc security assessment (v2. · Sigma Prime · 1 Mar 2023Fixed
The report gives no description here.
Open the reportMediumDummy Iterations Can Be AvoidedLido Staking Router · ChainSecurity · 3 Feb 2023Fixed
The report gives no description here.
Open the reportShow 10 more
MediumMemUtils.memcpy Mask Is WrongLido Staking Router · ChainSecurity · 3 Feb 2023Fixed
The report gives no description here.
Open the reportMediumNot all the ERC20 tokens are supportedLido L2 · OXORIO · 21 Jul 2022Fixed
The report gives no description here.
Open the reportMediumCompiler version is not fixedLido Jumpgate · OXORIO · 4 May 2022Fixed
The report gives no description here.
Open the reportMediumUnexpected behavior for tokens with non-standard decimals valueLido Jumpgate · OXORIO · 4 May 2022Fixed
The report gives no description here.
Open the reportMediumKafka Does Not Handle JSON Errors GracefullyFixed
The report gives no description here.
MediumPotential Index Out of Bounds PanicFixed
The report gives no description here.
MediumreinitDKG Can Be Called Multiple Times With The Same IDFixed
The report gives no description here.
LowMisleading warning about a pending key rotationLido Oracle V8_1 security review · Composable Security · 9 Sep 2026Fixed
The report gives no description here.
Open the reportLowStale signer used for the extra data transactionLido Oracle V8_1 security review · Composable Security · 9 Sep 2026Fixed
The report gives no description here.
Open the reportLowUnconfirmed telemetry transaction reported as sentLido Oracle V8_1 security review · Composable Security · 9 Sep 2026Fixed
The report gives no description here.
Open the reportShow 10 more
LowAllocationStatus enum desynchronizationLido NEST · ack3 · 24 Jul 2026Fixed
The report gives no description here.
Open the reportLowFailed revenue source recoveryLido NEST · ack3 · 24 Jul 2026Fixed
The report gives no description here.
Open the reportLowIncomplete Stonks switch wind-downLido NEST · ack3 · 24 Jul 2026Fixed
The report gives no description here.
Open the reportLowRecovered revenue reweighted by increased surplus shareLido NEST · ack3 · 24 Jul 2026Fixed
The report gives no description here.
Open the reportLowUnfillable buyback order slotLido NEST · ack3 · 24 Jul 2026Fixed
The report gives no description here.
Open the reportLow.length is re-evaluated on every iteration in for-loopsLido CSM v3 and CM v2 security review · Statemind · 30 Jun 2026Fixed
The report gives no description here.
Open the reportLowBondCurve.getBondAmountByKeysCount() and BondCurve.getKeysCountByBondAmount() revert with a generic panic for invalid curveIdLido CSM v3 and CM v2 security review · Statemind · 30 Jun 2026Fixed
The report gives no description here.
Open the reportLowCharge penalty recipient setter does not reject stETH addressLido CSM v3 and CM v2 security review · Statemind · 30 Jun 2026Fixed
The report gives no description here.
Open the reportLowCuratedDepositAllocator._computeAllocations() precondition n > 0 is not enforced by CuratedDepositAllocator.allocateInitialDeposits()Lido CSM v3 and CM v2 security review · Statemind · 30 Jun 2026Fixed
The report gives no description here.
Open the reportLowCuratedModule._updateDepositInfo() duplicates the BaseModule implementation instead of calling superLido CSM v3 and CM v2 security review · Statemind · 30 Jun 2026Fixed
The report gives no description here.
Open the reportShow 10 more
LowDuplicate key pointer encoding logic in WithdrawnValidatorLibLido CSM v3 and CM v2 security review · Statemind · 30 Jun 2026Fixed
The report gives no description here.
Open the reportLowGas OptimizationsLido CSM v3 and CM v2 security review · Statemind · 30 Jun 2026Fixed
The report gives no description here.
Open the reportLowInconsistent top-up eligibility and quantization can reduce effective distributionLido CSM v3 and CM v2 security review · Statemind · 30 Jun 2026Fixed
The report gives no description here.
Open the reportLowMinor gas optimizationsLido CSM v3 and CM v2 security review · Statemind · 30 Jun 2026Fixed
The report gives no description here.
Open the reportLowMinor gas optimizationsLido CSM v3 and CM v2 security review · Statemind · 30 Jun 2026Fixed
The report gives no description here.
Open the reportLowMissing bond curve existence validation causes unnecessary global refreshesLido CSM v3 and CM v2 security review · Statemind · 30 Jun 2026Fixed
The report gives no description here.
Open the reportLowMissing input validation enables key-pointer collision in view return valuesLido CSM v3 and CM v2 security review · Statemind · 30 Jun 2026Fixed
The report gives no description here.
Open the reportLowMultiple interface errors are not usedLido CSM v3 and CM v2 security review · Statemind · 30 Jun 2026Fixed
The report gives no description here.
Open the reportLowUnused custom errors and a redundant inline interfaceLido CSM v3 and CM v2 security review · Statemind · 30 Jun 2026Fixed
The report gives no description here.
Open the reportLowDocument or enforce the consolidationsource invariant for predictable balance helpersLido Oracle V8 security review · Composable Security · 24 Jun 2026Fixed
The report gives no description here.
Open the reportShow 10 more
LowEjector deposit lock uses current reserve instead of the per-frame reserve targetLido Oracle V8 security review · Composable Security · 24 Jun 2026Fixed
The report gives no description here.
Open the reportLowFix comment in VEBO exit-order tableLido Oracle V8 security review · Composable Security · 24 Jun 2026Fixed
The report gives no description here.
Open the reportLowRemove unused functions from production codeLido Oracle V8 security review · Composable Security · 24 Jun 2026Fixed
The report gives no description here.
Open the reportLowStale find_frame cache is not cleared when staking module oracle state is resetLido Oracle V8 security review · Composable Security · 24 Jun 2026Fixed
The report gives no description here.
Open the reportLowMissing isValidatorSlashed check in capTopUpLimitsByKeyBalance() lets stale top-up witnesses race the slashing proof pathLido CSM v3 and CM v2 audit · Certora · 17 Mar 2026Fixed
The report gives no description here.
Open the reportLowRebalance preview calculation inconsistencyLido Vault Wrapper · Ackee Blockchain Security · 6 Feb 2026Fixed
The report gives no description here.
Open the reportLowSocializedLoss event emits incorrect asset amountLido Vault Wrapper · Ackee Blockchain Security · 6 Feb 2026Fixed
The report gives no description here.
Open the reportLowDefault tier params not validated during initializationLido V3 · Certora · 10 Jan 2026Fixed
The report gives no description here.
Open the reportLowMissing connection check allows operations on disconnected vaultsLido V3 · Certora · 10 Jan 2026Fixed
The report gives no description here.
Open the reportLowZero external shares despite non-zero vault liabilities due to roundingLido V3 · Certora · 10 Jan 2026Fixed
The report gives no description here.
Open the reportShow 10 more
LowAmount Truncation In Deposit Message Signature ValidationLido security review · Sigma Prime · 1 Jan 2026Fixed
The report gives no description here.
Open the reportLowEmergencyVault::activateRecovery can be DoS by a reverting TAR- GET_VAULT callsLido Vault Middleware Audit Report · Cyfrin · 19 Dec 2025Fixed
The report gives no description here.
Open the reportLowERC4626Adapter::maxMint doesn’t consider pending fees to be harvested which leads to under-calculating the real shares that can be mintedLido Vault Middleware Audit Report · Cyfrin · 19 Dec 2025Fixed
The report gives no description here.
Open the reportLowERC4626Adapter::maxMint reverts for uncapped target vaultsLido Vault Middleware Audit Report · Cyfrin · 19 Dec 2025Fixed
The report gives no description here.
Open the reportLowGriefing attack on depositors by manipulating the exchange rate during recoveryMode via a donation of TARGET_VAULTs shares in between emergencyMode and recoveryModeLido Vault Middleware Audit Report · Cyfrin · 19 Dec 2025Fixed
The report gives no description here.
Open the reportLowNon-compliant events emitted on vault deposits and withdrawalsLido Vault Middleware Audit Report · Cyfrin · 19 Dec 2025Fixed
The report gives no description here.
Open the reportLowOrder rounding errorsLido Stonks 2. · Ackee Blockchain Security · 12 Dec 2025Fixed
The report gives no description here.
Open the reportLowRemove deprecated codeLido Oracle V7 security review · Composable Security · 12 Dec 2025Fixed
The report gives no description here.
Open the reportLowStonks can be unpaused after killSwitchLido Stonks 2. · Ackee Blockchain Security · 12 Dec 2025Fixed
The report gives no description here.
Open the reportLowDouble Counting of end-of-frame block When Calculating Liquidity Fees (Partial Fix)Lido V3 Oracle V7 · Certora · 10 Dec 2025Fixed
The report gives no description here.
Open the reportShow 10 more
LowStoracha Upload URL Leak inLido V3 Oracle V7 · Certora · 10 Dec 2025Fixed
The report gives no description here.
Open the reportLow[CSM] CSBondLock.MIN_BOND_LOCK_PERIOD can be zeroTriggerable Withdrawals and CSM v2 security review · Statemind · 19 Sep 2025Fixed
The report gives no description here.
Open the reportLow[CSM] Following Checks-Effects-Interactions pattern when interacting with TriggerableWithdrawalsGatewayTriggerable Withdrawals and CSM v2 security review · Statemind · 19 Sep 2025Fixed
The report gives no description here.
Open the reportLow[CSM] Gas optimizationsTriggerable Withdrawals and CSM v2 security review · Statemind · 19 Sep 2025Fixed
The report gives no description here.
Open the reportLow[CSM] Misleading commentTriggerable Withdrawals and CSM v2 security review · Statemind · 19 Sep 2025Fixed
The report gives no description here.
Open the reportLow[CSM] Missing NatSpec in constructorTriggerable Withdrawals and CSM v2 security review · Statemind · 19 Sep 2025Fixed
The report gives no description here.
Open the reportLow[CSM] Missing sanity check in NOAddresses.changeNodeOperatorRewardAddress()Triggerable Withdrawals and CSM v2 security review · Statemind · 19 Sep 2025Fixed
The report gives no description here.
Open the reportLowExtra check in the ValidatorExitDelayVerifier._getExitRequestDeliveryTimestamp() functionTriggerable Withdrawals and CSM v2 security review · Statemind · 19 Sep 2025Fixed
The report gives no description here.
Open the reportLowGas optimizationTriggerable Withdrawals and CSM v2 security review · Statemind · 19 Sep 2025Fixed
The report gives no description here.
Open the reportLowGas optimizationsTriggerable Withdrawals and CSM v2 security review · Statemind · 19 Sep 2025Fixed
The report gives no description here.
Open the reportShow 10 more
LowInconsistent exit requests eventsTriggerable Withdrawals and CSM v2 security review · Statemind · 19 Sep 2025Fixed
The report gives no description here.
Open the reportLowIncorrect comparison in ValidatorExitDelayVerifier._getSecondsSinceExitIsEligible() functionTriggerable Withdrawals and CSM v2 security review · Statemind · 19 Sep 2025Fixed
The report gives no description here.
Open the reportLowIncorrect NatSpecTriggerable Withdrawals and CSM v2 security review · Statemind · 19 Sep 2025Fixed
The report gives no description here.
Open the reportLowMissing AccountingOracle version updateTriggerable Withdrawals and CSM v2 security review · Statemind · 19 Sep 2025Fixed
The report gives no description here.
Open the reportLowRedundant components in the TriggerableWithdrawalsGateway contractTriggerable Withdrawals and CSM v2 security review · Statemind · 19 Sep 2025Fixed
The report gives no description here.
Open the reportLowTriggerable exits do not increment TOTAL_REQUESTS_PROCESSED_POSITIONTriggerable Withdrawals and CSM v2 security review · Statemind · 19 Sep 2025Fixed
The report gives no description here.
Open the reportLowBond burning denial of serviceLido Csm V2 · Ackee Blockchain Security · 16 Sep 2025Fixed
The report gives no description here.
Open the reportLowDepositable count not updated in migrateToPriorityQueueLido Csm V2 · Ackee Blockchain Security · 16 Sep 2025Fixed
The report gives no description here.
Open the reportLowInconsistent calculation of total requests processedLido Triggerable Withdrawals · Ackee Blockchain Security · 16 Sep 2025Fixed
The report gives no description here.
Open the reportLowInconsistent update of exit limits on config changeLido Triggerable Withdrawals · Ackee Blockchain Security · 16 Sep 2025Fixed
The report gives no description here.
Open the reportShow 10 more
LowIncorrect number of migrated keysLido Csm V2 · Ackee Blockchain Security · 16 Sep 2025Fixed
The report gives no description here.
Open the reportLowRemove deprecated variable and constant namesLido Oracle V6 security review · Composable Security · 21 Aug 2025Fixed
The report gives no description here.
Open the reportLowUse zero-length proofs for rewards and strikes treesLido Oracle V6 security review · Composable Security · 21 Aug 2025Fixed
The report gives no description here.
Open the reportLowBad targetLimit accounting in getNodeOperatorSummaryLido Community Staking Module audit (April 2025) · Ackee Blockchain Security · 8 Apr 2025Fixed
The report gives no description here.
Open the reportLowDepositable keys count not updated in normalizeQueueLido Community Staking Module audit (April 2025) · Ackee Blockchain Security · 8 Apr 2025Fixed
The report gives no description here.
Open the reportLowExecution layer rewards stealing settlement not resetting bond curveLido Community Staking Module audit (April 2025) · Ackee Blockchain Security · 8 Apr 2025Fixed
The report gives no description here.
Open the reportLowExecution layer stealing settlement revertLido Community Staking Module audit (April 2025) · Ackee Blockchain Security · 8 Apr 2025Fixed
The report gives no description here.
Open the reportLowStrict msg.value checkLido Community Staking Module audit (April 2025) · Ackee Blockchain Security · 8 Apr 2025Fixed
The report gives no description here.
Open the reportLowEject validators exitable in upcoming oracle frameLido Oracle v5 04-25 security review · Composable Security · 7 Apr 2025Fixed
The report gives no description here.
Open the reportLowInvalid number of delayed validators stored in PrometheusLido Oracle v5 04-25 security review · Composable Security · 7 Apr 2025Fixed
The report gives no description here.
Open the reportShow 10 more
LowIncomplete Minimum Asset Lock Duration ValidationLido Dual Governance re-audit · OpenZeppelin · 18 Feb 2025Fixed
The report gives no description here.
Open the reportLowlastAssetsLockTimestamp is updated even though unstEthIds = [ ]Lido DG · Certora · 5 Feb 2025Fixed
The report gives no description here.
Open the reportLowremoveSealableWithdrawalBloc ker does not return a boolean or revert when failing to removeLido DG · Certora · 5 Feb 2025Fixed
The report gives no description here.
Open the reportLowSealableCalls.sol.callResume() isPaused flag is wrongLido DG · Certora · 5 Feb 2025Fixed
The report gives no description here.
Open the reportLowwithdrawETH is callable with unstEthIds = [ ]Lido DG · Certora · 5 Feb 2025Fixed
The report gives no description here.
Open the reportLowBalance calculation before checking for stake existence in NGOLisLaunchnodes Lido Liquid Staking · OXORIO · 13 Dec 2024Fixed
The report gives no description here.
Open the reportLowDelay between reward distributions changes after contract initialization in NGOLisLaunchnodes Lido Liquid Staking · OXORIO · 13 Dec 2024Fixed
The report gives no description here.
Open the reportLowEvent name in the specification is misleading in NGOLisFactoryLaunchnodes Lido Liquid Staking · OXORIO · 13 Dec 2024Fixed
The report gives no description here.
Open the reportLowInconsistency in error notification methods in NGOLisLaunchnodes Lido Liquid Staking · OXORIO · 13 Dec 2024Fixed
The report gives no description here.
Open the reportLowInconsistent state variable naming style in NGOLis, NGOLisFactoryLaunchnodes Lido Liquid Staking · OXORIO · 13 Dec 2024Fixed
The report gives no description here.
Open the reportShow 10 more
LowIncorrect event parameter value wstEth instead of stEth in NGOLisLaunchnodes Lido Liquid Staking · OXORIO · 13 Dec 2024Fixed
The report gives no description here.
Open the reportLowInsufficient validation in the case of the very first stake in NGOLisLaunchnodes Lido Liquid Staking · OXORIO · 13 Dec 2024Fixed
The report gives no description here.
Open the reportLowInterface not used in IAccountOracle.solLaunchnodes Lido Liquid Staking · OXORIO · 13 Dec 2024Fixed
The report gives no description here.
Open the reportLowMisleading variable name wstAmount instead of stAmount in NGOLisLaunchnodes Lido Liquid Staking · OXORIO · 13 Dec 2024Fixed
The report gives no description here.
Open the reportLowMissing event emissions in setters in NGOLis, NGOLisFactoryLaunchnodes Lido Liquid Staking · OXORIO · 13 Dec 2024Fixed
The report gives no description here.
Open the reportLowMissing parameter validation in NGOLis, NGOLisFactoryLaunchnodes Lido Liquid Staking · OXORIO · 13 Dec 2024Fixed
The report gives no description here.
Open the reportLowNo _disableInitializers call in the constructor in NGOLisLaunchnodes Lido Liquid Staking · OXORIO · 13 Dec 2024Fixed
The report gives no description here.
Open the reportLowNo parameter validation in NGOLisLaunchnodes Lido Liquid Staking · OXORIO · 13 Dec 2024Fixed
The report gives no description here.
Open the reportLowNo setter parameter validation in NGOLisLaunchnodes Lido Liquid Staking · OXORIO · 13 Dec 2024Fixed
The report gives no description here.
Open the reportLowRedundant check for unsigned value being negative in NGOLisLaunchnodes Lido Liquid Staking · OXORIO · 13 Dec 2024Fixed
The report gives no description here.
Open the reportShow 10 more
LowRedundant increment operation in NGOLisLaunchnodes Lido Liquid Staking · OXORIO · 13 Dec 2024Fixed
The report gives no description here.
Open the reportLowRedundant storage of the totalAssets value in NGOLisLaunchnodes Lido Liquid Staking · OXORIO · 13 Dec 2024Fixed
The report gives no description here.
Open the reportLowSetting msg.sender as owner during deployment in NGOLisFactoryLaunchnodes Lido Liquid Staking · OXORIO · 13 Dec 2024Fixed
The report gives no description here.
Open the reportLowSetting msg.sender instead of owner in the mapping ownerToNgo in NGOLisFactoryLaunchnodes Lido Liquid Staking · OXORIO · 13 Dec 2024Fixed
The report gives no description here.
Open the reportLowSimilar code in identical functions in NGOLisLaunchnodes Lido Liquid Staking · OXORIO · 13 Dec 2024Fixed
The report gives no description here.
Open the reportLowSimultaneous use of uint and uint256 typesLaunchnodes Lido Liquid Staking · OXORIO · 13 Dec 2024Fixed
The report gives no description here.
Open the reportLowSuboptimal computation of user balance in NGOLisLaunchnodes Lido Liquid Staking · OXORIO · 13 Dec 2024Fixed
The report gives no description here.
Open the reportLowSuboptimal handling of storage variables in NGOLisLaunchnodes Lido Liquid Staking · OXORIO · 13 Dec 2024Fixed
The report gives no description here.
Open the reportLowTransfer of zero _fee is possible in NGOLisLaunchnodes Lido Liquid Staking · OXORIO · 13 Dec 2024Fixed
The report gives no description here.
Open the reportLowUnused contracts in NGOLis.sol, NGOLisFactory.solLaunchnodes Lido Liquid Staking · OXORIO · 13 Dec 2024Fixed
The report gives no description here.
Open the reportShow 10 more
LowUnused error in NGOLisLaunchnodes Lido Liquid Staking · OXORIO · 13 Dec 2024Fixed
The report gives no description here.
Open the reportLowUnused variable _prevRewards in NGOLisLaunchnodes Lido Liquid Staking · OXORIO · 13 Dec 2024Fixed
The report gives no description here.
Open the reportLowIncorrect Encoding of Sealable Resume ProposalLido Dual Governance audit · OpenZeppelin · 19 Nov 2024Fixed
The report gives no description here.
Open the reportLowMissing Check in Escrow.requestNextWithdrawalsBatchLido Dual Governance audit · OpenZeppelin · 19 Nov 2024Fixed
The report gives no description here.
Open the reportLowMissing Zero-Address ChecksLido Dual Governance audit · OpenZeppelin · 19 Nov 2024Fixed
The report gives no description here.
Open the reportLowThe Parameters Passed Into The InvalidClaimableAmount Error Are SwappedLido Dual Governance audit · OpenZeppelin · 19 Nov 2024Fixed
The report gives no description here.
Open the reportLowUndocumented ParameterLido Dual Governance audit · OpenZeppelin · 19 Nov 2024Fixed
The report gives no description here.
Open the reportLowAbsence of zero checkDual Governance security review · Statemind · 25 Oct 2024Fixed
The report gives no description here.
Open the reportLowAdditional check when converting to IndexOneBased typeDual Governance security review · Statemind · 25 Oct 2024Fixed
The report gives no description here.
Open the reportLowConsistency in using Timestamps.now()Dual Governance security review · Statemind · 25 Oct 2024Fixed
The report gives no description here.
Open the reportShow 10 more
LowDefine functions as external in HashConsensusDual Governance security review · Statemind · 25 Oct 2024Fixed
The report gives no description here.
Open the reportLowEscrowState.setMinAssetsLockDuration() can be called out of initializationDual Governance security review · Statemind · 25 Oct 2024Fixed
The report gives no description here.
Open the reportLowEvent emission for unfinalized recordsDual Governance security review · Statemind · 25 Oct 2024Fixed
The report gives no description here.
Open the reportLowGas optimisationsDual Governance security review · Statemind · 25 Oct 2024Fixed
The report gives no description here.
Open the reportLowHashConsensus._getHashState() doesn't return historical quorum and supportDual Governance security review · Statemind · 25 Oct 2024Fixed
The report gives no description here.
Open the reportLowImprecise conditions for pause check in ResealManagerDual Governance security review · Statemind · 25 Oct 2024Fixed
The report gives no description here.
Open the reportLowInconsistent naming in Escrow contract and interfaceDual Governance security review · Statemind · 25 Oct 2024Fixed
The report gives no description here.
Open the reportLowInconsistent result of the DualGovernance state view functionsDual Governance security review · Statemind · 25 Oct 2024Fixed
The report gives no description here.
Open the reportLowIncorrect natspecDual Governance security review · Statemind · 25 Oct 2024Fixed
The report gives no description here.
Open the reportLowMissing constructor check for TiebreakerActivationTimeoutDual Governance security review · Statemind · 25 Oct 2024Fixed
The report gives no description here.
Open the reportShow 10 more
LowMissing parameter sanity checksDual Governance security review · Statemind · 25 Oct 2024Fixed
The report gives no description here.
Open the reportLowMissing zero checksDual Governance security review · Statemind · 25 Oct 2024Fixed
The report gives no description here.
Open the reportLowNo sanity check of SanityCheckParamsDual Governance security review · Statemind · 25 Oct 2024Fixed
The report gives no description here.
Open the reportLowProposalType.ResumeSealable is not included in encoding dataDual Governance security review · Statemind · 25 Oct 2024Fixed
The report gives no description here.
Open the reportLowProposer is not saved in proposal dataDual Governance security review · Statemind · 25 Oct 2024Fixed
The report gives no description here.
Open the reportLowRedundant storage arrayDual Governance security review · Statemind · 25 Oct 2024Fixed
The report gives no description here.
Open the reportLowRedundant underflow checksDual Governance security review · Statemind · 25 Oct 2024Fixed
The report gives no description here.
Open the reportLowSome custom errors are never used and incorrect error name is usedDual Governance security review · Statemind · 25 Oct 2024Fixed
The report gives no description here.
Open the reportLowThe WithdrawalsBatchesQueue functions improvementsDual Governance security review · Statemind · 25 Oct 2024Fixed
The report gives no description here.
Open the reportLowTiebreaker condition inconsistencyDual Governance security review · Statemind · 25 Oct 2024Fixed
The report gives no description here.
Open the reportShow 10 more
LowTimelockedGovernance.executeProposal() is not part of IGovernance interfaceDual Governance security review · Statemind · 25 Oct 2024Fixed
The report gives no description here.
Open the reportLowUninitialized TimelockState after deploymentDual Governance security review · Statemind · 25 Oct 2024Fixed
The report gives no description here.
Open the reportLowunregisterProposer gas optimizationDual Governance security review · Statemind · 25 Oct 2024Fixed
The report gives no description here.
Open the reportLowUnused functions in SealableCallsDual Governance security review · Statemind · 25 Oct 2024Fixed
The report gives no description here.
Open the reportLowUse >= instead of == in HashConsensus._vote()Dual Governance security review · Statemind · 25 Oct 2024Fixed
The report gives no description here.
Open the reportLowUse Timestamp type in EnumerableProposals.Proposal structureDual Governance security review · Statemind · 25 Oct 2024Fixed
The report gives no description here.
Open the reportLowBad targetLimit accounting in getNodeOperatorSummaryLido Community Staking Module audit (October 2024) · Ackee Blockchain Security · 12 Oct 2024Fixed
The report gives no description here.
Open the reportLowDepositable keys count not updated in normalizeQueueLido Community Staking Module audit (October 2024) · Ackee Blockchain Security · 12 Oct 2024Fixed
The report gives no description here.
Open the reportLowExecution layer rewards stealing settlement not resetting bond curveLido Community Staking Module audit (October 2024) · Ackee Blockchain Security · 12 Oct 2024Fixed
The report gives no description here.
Open the reportLowExecution layer stealing settlement revertLido Community Staking Module audit (October 2024) · Ackee Blockchain Security · 12 Oct 2024Fixed
The report gives no description here.
Open the reportShow 10 more
LowStrict msg.value checkLido Community Staking Module audit (October 2024) · Ackee Blockchain Security · 12 Oct 2024Fixed
The report gives no description here.
Open the reportLowOverflow on type castingLido Staking Router V2 · Ackee Blockchain Security · 5 Sep 2024Fixed
The report gives no description here.
Open the reportLowPotential revert on underflowLido Staking Router V2 · Ackee Blockchain Security · 5 Sep 2024Fixed
The report gives no description here.
Open the reportLowThe clearNodeOperatorPenalty returns always falseLido Staking Router V2 · Ackee Blockchain Security · 5 Sep 2024Fixed
The report gives no description here.
Open the reportLowSpecification MismatchLIP-23: Rebase Check Smart Contracts · ChainSecurity · 21 Jun 2024Fixed
The report gives no description here.
Open the reportLowThe Second Opinion Oracle Should Return a Unified BalanceLIP-23: Rebase Check Smart Contracts · ChainSecurity · 21 Jun 2024Fixed
The report gives no description here.
Open the reportLowInsufficient token rate precisionLido Steth Optimism · Ackee Blockchain Security · 20 May 2024Fixed
The report gives no description here.
Open the reportLowunwrap inconsistent tokens amount in eventLido Steth Optimism · Ackee Blockchain Security · 20 May 2024Fixed
The report gives no description here.
Open the reportLowCode style recommendationsLido Simple Delegation security review · Statemind · 12 Mar 2024Fixed
The report gives no description here.
Open the reportLowInconsistent delegation checkLido Simple Delegation security review · Statemind · 12 Mar 2024Fixed
The report gives no description here.
Open the reportShow 10 more
LowChangeNodeOperatorManagers redundant memory allocationLido Simple DVT Easy Track Factories security revi · Statemind · 24 Dec 2023Fixed
The report gives no description here.
Open the reportLowDuplication of INodeOperatorsRegistry interfaceLido Simple DVT Easy Track Factories security revi · Statemind · 24 Dec 2023Fixed
The report gives no description here.
Open the reportLowGas optimizations: cyclesLido Simple DVT Easy Track Factories security revi · Statemind · 24 Dec 2023Fixed
The report gives no description here.
Open the reportLowGas optimizations: external callsLido Simple DVT Easy Track Factories security revi · Statemind · 24 Dec 2023Fixed
The report gives no description here.
Open the reportLowInsufficient checksLido Simple DVT Easy Track Factories security revi · Statemind · 24 Dec 2023Fixed
The report gives no description here.
Open the reportLowNot used parts of codeLido Simple DVT Easy Track Factories security revi · Statemind · 24 Dec 2023Fixed
The report gives no description here.
Open the reportLowTypos in comments/namesLido Simple DVT Easy Track Factories security revi · Statemind · 24 Dec 2023Fixed
The report gives no description here.
Open the reportLowCalldata location can be used for function parameters in multiple contracts and interfacesLido EasyTrack · OXORIO · 18 Oct 2023Fixed
The report gives no description here.
Open the reportLowMissing spec in TopUpAllowedRecipientsLido EasyTrack · OXORIO · 18 Oct 2023Fixed
The report gives no description here.
Open the reportLowRedundant asserts in AllowedRecipientsBuilderLido EasyTrack · OXORIO · 18 Oct 2023Fixed
The report gives no description here.
Open the reportShow 10 more
LowRedundant initialization in TopUpAllowedRecipientsLido EasyTrack · OXORIO · 18 Oct 2023Fixed
The report gives no description here.
Open the reportLowFunction renamingLido V2 Upgrade Template security review · Statemind · 10 May 2023Fixed
The report gives no description here.
Open the reportLowNo checks that the EOA deployer passed to the deployed contractsLido V2 Upgrade Template security review · Statemind · 10 May 2023Fixed
The report gives no description here.
Open the reportLowNot granted roleLido V2 Upgrade Template security review · Statemind · 10 May 2023Fixed
The report gives no description here.
Open the reportLowRedundant ACL checkLido V2 Upgrade Template security review · Statemind · 10 May 2023Fixed
The report gives no description here.
Open the reportLowUntitled findingLido V2 on chain · OXORIO · 10 May 2023Fixed
No description was provided.
Open the reportLowUntitled findingLido V2 on chain · OXORIO · 10 May 2023Fixed
No description was provided.
Open the reportLowUntitled findingLido V2 on chain · OXORIO · 10 May 2023Fixed
No description was provided.
Open the reportLowUntitled findingLido V2 on chain · OXORIO · 10 May 2023Fixed
No description was provided.
Open the reportLowUnused external functionLido V2 Upgrade Template security review · Statemind · 10 May 2023Fixed
The report gives no description here.
Open the reportShow 10 more
LowUnused functionLido V2 Upgrade Template security review · Statemind · 10 May 2023Fixed
The report gives no description here.
Open the reportLowUseless checkLido V2 Upgrade Template security review · Statemind · 10 May 2023Fixed
The report gives no description here.
Open the reportLowActive validators calculationLido V2 security review · Statemind · 28 Apr 2023Fixed
The report gives no description here.
Open the reportLowArray length checkLido V2 security review · Statemind · 28 Apr 2023Fixed
The report gives no description here.
Open the reportLowArray length checkLido V2 security review · Statemind · 28 Apr 2023Fixed
The report gives no description here.
Open the reportLowBinary search boundaryLido V2 security review · Statemind · 28 Apr 2023Fixed
The report gives no description here.
Open the reportLowCheck arrays lengthLido V2 security review · Statemind · 28 Apr 2023Fixed
The report gives no description here.
Open the reportLowclearNodeOperatorPenalty() can be restricted to externalLido V2 security review · Statemind · 28 Apr 2023Fixed
The report gives no description here.
Open the reportLowCode duplicationLido V2 security review · Statemind · 28 Apr 2023Fixed
The report gives no description here.
Open the reportLowDivision before multiplicationLido V2 security review · Statemind · 28 Apr 2023Fixed
The report gives no description here.
Open the reportShow 10 more
LowExited validators count might be bigger than total depositedLido V2 security review · Statemind · 28 Apr 2023Fixed
The report gives no description here.
Open the reportLowGas optimizationLido V2 security review · Statemind · 28 Apr 2023Fixed
The report gives no description here.
Open the reportLowGas optimizationLido V2 security review · Statemind · 28 Apr 2023Fixed
The report gives no description here.
Open the reportLowGas optimizationLido V2 security review · Statemind · 28 Apr 2023Fixed
The report gives no description here.
Open the reportLowGas optimizationLido V2 security review · Statemind · 28 Apr 2023Fixed
The report gives no description here.
Open the reportLowGas optimizationLido V2 security review · Statemind · 28 Apr 2023Fixed
The report gives no description here.
Open the reportLowGas optimization for unlimited allowanceLido V2 security review · Statemind · 28 Apr 2023Fixed
The report gives no description here.
Open the reportLowGuard checks for zero secondsPerSlotLido V2 security review · Statemind · 28 Apr 2023Fixed
The report gives no description here.
Open the reportLowHardcoded StakingModule limitLido V2 security review · Statemind · 28 Apr 2023Fixed
The report gives no description here.
Open the reportLowImproper commentsLido V2 security review · Statemind · 28 Apr 2023Fixed
The report gives no description here.
Open the reportShow 10 more
LowInconsistent input string for role hashLido V2 security review · Statemind · 28 Apr 2023Fixed
The report gives no description here.
Open the reportLowIncorrect checkLido V2 security review · Statemind · 28 Apr 2023Fixed
The report gives no description here.
Open the reportLowIncorrect information in the commentLido V2 security review · Statemind · 28 Apr 2023Fixed
The report gives no description here.
Open the reportLowInsufficient if statement in WithrawalQueueBase contractLido V2 security review · Statemind · 28 Apr 2023Fixed
The report gives no description here.
Open the reportLowLack of zero address checkLido V2 security review · Statemind · 28 Apr 2023Fixed
The report gives no description here.
Open the reportLowMissing checks for _requestId out of rangeLido V2 security review · Statemind · 28 Apr 2023Fixed
The report gives no description here.
Open the reportLowMissing zero check when reporting minted rewardsLido V2 security review · Statemind · 28 Apr 2023Fixed
The report gives no description here.
Open the reportLowModifier doesn't guarantee anything, default enum statusLido V2 security review · Statemind · 28 Apr 2023Fixed
The report gives no description here.
Open the reportLowMultiple transfers of stETH token instead of a single transferLido V2 security review · Statemind · 28 Apr 2023Fixed
The report gives no description here.
Open the reportLowNo check on the refSlot in submitting a ConsensusReportLido V2 security review · Statemind · 28 Apr 2023Fixed
The report gives no description here.
Open the reportShow 10 more
LowNo zero check for _maxPositiveTokenRebaseLido V2 security review · Statemind · 28 Apr 2023Fixed
The report gives no description here.
Open the reportLowNon-callable functionLido V2 security review · Statemind · 28 Apr 2023Fixed
The report gives no description here.
Open the reportLowPayable ownerLido V2 security review · Statemind · 28 Apr 2023Fixed
The report gives no description here.
Open the reportLowPenalty delay typeLido V2 security review · Statemind · 28 Apr 2023Fixed
The report gives no description here.
Open the reportLowPossible underflow in trimUint256Array()Lido V2 security review · Statemind · 28 Apr 2023Fixed
The report gives no description here.
Open the reportLowPrecise calculationsLido V2 security review · Statemind · 28 Apr 2023Fixed
The report gives no description here.
Open the reportLowRedundant onlyRole modifierLido V2 security review · Statemind · 28 Apr 2023Fixed
The report gives no description here.
Open the reportLowRedundant v component checkLido V2 security review · Statemind · 28 Apr 2023Fixed
The report gives no description here.
Open the reportLowRequest owner should not be payableLido V2 security review · Statemind · 28 Apr 2023Fixed
The report gives no description here.
Open the reportLowRoles mismatchingLido V2 security review · Statemind · 28 Apr 2023Fixed
The report gives no description here.
Open the reportShow 10 more
LowState mutabilityLido V2 security review · Statemind · 28 Apr 2023Fixed
The report gives no description here.
Open the reportLowState mutability can be restricted to viewLido V2 security review · Statemind · 28 Apr 2023Fixed
The report gives no description here.
Open the reportLowStuck penalty delay extensionLido V2 security review · Statemind · 28 Apr 2023Fixed
The report gives no description here.
Open the reportLowTransfer of instructions necessary for initializationLido V2 security review · Statemind · 28 Apr 2023Fixed
The report gives no description here.
Open the reportLowType mismatchLido V2 security review · Statemind · 28 Apr 2023Fixed
The report gives no description here.
Open the reportLowTypo in _addSigningKeys()Lido V2 security review · Statemind · 28 Apr 2023Fixed
The report gives no description here.
Open the reportLowTypo in commentLido V2 security review · Statemind · 28 Apr 2023Fixed
The report gives no description here.
Open the reportLowUnable to get a consensus state if the quorum is unreachableLido V2 security review · Statemind · 28 Apr 2023Fixed
The report gives no description here.
Open the reportLowUnclear commentsLido V2 security review · Statemind · 28 Apr 2023Fixed
The report gives no description here.
Open the reportLowUnclear purpose of limits in Sanity CheckerLido V2 security review · Statemind · 28 Apr 2023Fixed
The report gives no description here.
Open the reportShow 10 more
LowUnnecessary variableLido V2 security review · Statemind · 28 Apr 2023Fixed
The report gives no description here.
Open the reportLowUnsafe castingLido V2 security review · Statemind · 28 Apr 2023Fixed
The report gives no description here.
Open the reportLowUnsafe mathLido V2 security review · Statemind · 28 Apr 2023Fixed
The report gives no description here.
Open the reportLowUnsafe memory handling in getStakingRewardsDistribution()Lido V2 security review · Statemind · 28 Apr 2023Fixed
The report gives no description here.
Open the reportLowUnused errorsLido V2 security review · Statemind · 28 Apr 2023Fixed
The report gives no description here.
Open the reportLowUnused return valueLido V2 security review · Statemind · 28 Apr 2023Fixed
The report gives no description here.
Open the reportLowUpdating variables after external calls and transfersLido V2 security review · Statemind · 28 Apr 2023Fixed
The report gives no description here.
Open the reportLowUseless payable conversion for callLido V2 security review · Statemind · 28 Apr 2023Fixed
The report gives no description here.
Open the reportLowWithdrawal finalization before actual shares burnLido V2 security review · Statemind · 28 Apr 2023Fixed
The report gives no description here.
Open the reportLowWrong comment in DepositSecurityModuleLido V2 security review · Statemind · 28 Apr 2023Fixed
The report gives no description here.
Open the reportShow 10 more
LowWrong event argumentLido V2 security review · Statemind · 28 Apr 2023Fixed
The report gives no description here.
Open the reportLowCreating a GateSeal with duplicate sealables prevents sealingGateSeals security review · Statemind · 20 Apr 2023Fixed
The report gives no description here.
Open the reportLowMinimal pause durationGateSeals security review · Statemind · 20 Apr 2023Fixed
The report gives no description here.
Open the reportLowCODE STYLE PROBLEMSLido security review · Hexens · 14 Apr 2023Fixed
The report gives no description here.
Open the reportLowDEPOSITSECURITYMODULE REDUNDANT STAKING MODULE ID CHECKSLido security review · Hexens · 14 Apr 2023Fixed
The report gives no description here.
Open the reportLowREBASE LIMITER ISLIMITREACHED WILL ALMOST ALWAYS RETURN FALSE DUE TO ROUNDING ERRORLido security review · Hexens · 14 Apr 2023Fixed
The report gives no description here.
Open the reportLowREBASE LIMITER MAXTOTALPOOLEDETHER OPTIMISATIONLido security review · Hexens · 14 Apr 2023Fixed
The report gives no description here.
Open the reportLowSTAKING ROUTER REDUNDANT MODULE ID CHECKSLido security review · Hexens · 14 Apr 2023Fixed
The report gives no description here.
Open the reportLowTYPOGRAPHICAL ERRORSLido security review · Hexens · 14 Apr 2023Fixed
The report gives no description here.
Open the reportLowWITHDRAWAL QUEUE ERC721 OWNEROF GAS OPTIMISATIONLido security review · Hexens · 14 Apr 2023Fixed
The report gives no description here.
Open the reportShow 10 more
LowWITHDRAWALREQUESTERC721 BALANCE DOES NOT DECREASE AFTER CLAIMINGLido security review · Hexens · 14 Apr 2023Fixed
The report gives no description here.
Open the reportLowOutdated Prysm DependencyLido dc4bc security assessment (v2. · Sigma Prime · 1 Mar 2023Fixed
The report gives no description here.
Open the reportLowVerification Script Fragile to WhitespaceLido dc4bc security assessment (v2. · Sigma Prime · 1 Mar 2023Fixed
The report gives no description here.
Open the reportLowCode RedundanciesLido Staking Router · ChainSecurity · 3 Feb 2023Fixed
The report gives no description here.
Open the reportLowIncorrect CommentsLido Staking Router · ChainSecurity · 3 Feb 2023Fixed
The report gives no description here.
Open the reportLowInterface IssuesLido Staking Router · ChainSecurity · 3 Feb 2023Fixed
The report gives no description here.
Open the reportLowIssues With EventsLido Staking Router · ChainSecurity · 3 Feb 2023Fixed
The report gives no description here.
Open the reportLowNon-existent Modules Are Active by DefaultLido Staking Router · ChainSecurity · 3 Feb 2023Fixed
The report gives no description here.
Open the reportLowSanity Checks MissingLido Staking Router · ChainSecurity · 3 Feb 2023Fixed
The report gives no description here.
Open the reportLowVisibility Can Be ReducedLido Staking Router · ChainSecurity · 3 Feb 2023Fixed
The report gives no description here.
Open the reportShow 10 more
LowGas optimizationTRP Vesting Escrow security review · Statemind · 27 Jan 2023Fixed
The report gives no description here.
Open the reportLowInline block.timestampTRP Vesting Escrow security review · Statemind · 27 Jan 2023Fixed
The report gives no description here.
Open the reportLowNo check if amount to be vested is bigger than 0TRP Vesting Escrow security review · Statemind · 27 Jan 2023Fixed
The report gives no description here.
Open the reportLowThe function claim() doesn't return value claimedTRP Vesting Escrow security review · Statemind · 27 Jan 2023Fixed
The report gives no description here.
Open the reportLowAddress of a recipient in ERC20Recovered might be indexed.MEV-Boost relay allowlist Security security review · Statemind · 9 Sep 2022Fixed
The report gives no description here.
Open the reportLowEvent name RelaysUpdated is ambiguousMEV-Boost relay allowlist Security security review · Statemind · 9 Sep 2022Fixed
The report gives no description here.
Open the reportLowFunction _safe_erc20_transfer() doesn't revert if token is not a contractMEV-Boost relay allowlist Security security review · Statemind · 9 Sep 2022Fixed
The report gives no description here.
Open the reportLowGas optimisationMEV-Boost relay allowlist Security security review · Statemind · 9 Sep 2022Fixed
The report gives no description here.
Open the reportLowInaccurate NatSpec commentsMEV-Boost relay allowlist Security security review · Statemind · 9 Sep 2022Fixed
The report gives no description here.
Open the reportLowImport is not usedLido L2 · OXORIO · 21 Jul 2022Fixed
The report gives no description here.
Open the reportShow 10 more
LowModifier onlyAdmin may be misleadingLido L2 · OXORIO · 21 Jul 2022Fixed
The report gives no description here.
Open the reportLowPragma is not lockedLido L2 · OXORIO · 21 Jul 2022Fixed
The report gives no description here.
Open the reportLowPublic function could be declared externalLido L2 · OXORIO · 21 Jul 2022Fixed
The report gives no description here.
Open the reportLowComment doesn't match the codeLido Jumpgate · OXORIO · 4 May 2022Fixed
The report gives no description here.
Open the reportLowLack of checking approve return value harder errors understandingLido Jumpgate · OXORIO · 4 May 2022Fixed
The report gives no description here.
Open the reportLowOwner can renounce ownership disabling recover functionsLido Jumpgate · OXORIO · 4 May 2022Fixed
The report gives no description here.
Open the reportLowRecover functions allow sending to address(0)Lido Jumpgate · OXORIO · 4 May 2022Fixed
The report gives no description here.
Open the reportLowRepetitive constant for nonce valueLido Jumpgate · OXORIO · 4 May 2022Fixed
The report gives no description here.
Open the reportLowSafeERC20 import is unusedLido Jumpgate · OXORIO · 4 May 2022Fixed
The report gives no description here.
Open the reportLowSeveral public functions may be declared externalLido Jumpgate · OXORIO · 4 May 2022Fixed
The report gives no description here.
Open the reportShow 10 more
LowUnnecessary nonce variable in TokensBridged eventLido Jumpgate · OXORIO · 4 May 2022Fixed
The report gives no description here.
Open the reportLow0 is used in several meanings in token2IndexFixed
The report gives no description here.
LowComplicated id burning section of codeFixed
The report gives no description here.
LowDuplicate storage readingFixed
The report gives no description here.
LowLDO Holder DOS PotentialFixed
The report gives no description here.
LowMagic numbers are usedFixed
The report gives no description here.
LowMotion Creators Can Block Creation of Other MotionsFixed
The report gives no description here.
LowNot descriptive variable name lengthFixed
The report gives no description here.
LowNot descriptive variable name tokenIndexFixed
The report gives no description here.
LowNot saving index calculation result to a variable with a meaningful name may decrease readabilityFixed
The report gives no description here.
Show 5 more
LowOne-letter variable tFixed
The report gives no description here.
LowOutdated Prysm DependencyFixed
The report gives no description here.
LowReducing readability by using mutable variableFixed
The report gives no description here.
LowSub-Optimal Reentrancy ProtectionsFixed
The report gives no description here.
LowVerification Script Fragile to WhitespaceFixed
The report gives no description here.
Contracts
No deployed address is recorded for these audits.
The reports name a repository or files. Open a report to see its scope.
Show this on your site
Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.
Content
Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.
Style
Format
<head><script src="https://widget.trustblock.run/project-widget.min.js" defer></script></head><body><divdata-tb-project-widgetdata-tb-project-slug="lido"></div></body>
Paste the code where the label should appear. It uses no API credit and updates by itself.
Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us