Lido security record
As of 24 Oct 2026, Lido has 53 audit reports by 13 security firms on Trustblock; the latest is by Composable Security, dated 9 Sep 2026. Those reports list 2 criticals acknowledged and not fixed.
Record last updated . It holds audits and findings, contracts and incidents up to Oct 2026. Trustblock does not review code.
Audits53
Newest first
1 other security report listed, not counted
| Audit | Security firm | Date | Scope | Critical findings | Report |
|---|---|---|---|---|---|
| Lido on Polygon PR67 | Security firm: OXORIO | Date: | Scope: Repository at commit b992dc6 | No open critical findings | Open · audits.oxor.io |
| Lido on Polygon PR69 | Security firm: OXORIO | Date: | Scope: Repository at commit 1d8e469 | No open critical findings | Open · audits.oxor.io |
| Lido Easy Track security review | Security firm: Sigma Prime | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| Lido Dc4bc security review | Security firm: Sigma Prime | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
Findings591
Statuses are the security firm’s own, from each report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 2 | 12 |
| High | 0 | 3 | 32 |
| Medium | 0 | 20 | 73 |
| Low | 1 | 160 | 288 |
CriticalFunds stealing by malicious staking moduleAcknowledged
The report gives no description here.
CriticalUser looses their funds if maxSubmissionCost is lowAcknowledged
The report gives no description here.
HighA Node Operator can circumvent DAO validator key approvalAcknowledged
The report gives no description here.
HighPossible griefing attack to cancel motionsAcknowledged
The report gives no description here.
HighThe parameter depositCalldata can be hijacked by a front-runAcknowledged
The report gives no description here.
MediumPerformance Web Server publicly bound by default with no authentication, authorization or rate limitingLido Oracle V8 security review · Composable Security · 24 Jun 2026Acknowledged
The report gives no description here.
Open the reportMediumStaking limits bypass via external ether rebalancingLido V3 · Certora · 10 Jan 2026Acknowledged
The report gives no description here.
Open the reportMedium[CSM] A new Node Operator can migrate via migrateToPriorityQueueTriggerable Withdrawals and CSM v2 security review · Statemind · 19 Sep 2025Acknowledged
The report gives no description here.
Open the reportMedium[CSM] Double counting of enqueued keys after using CSModule.migrateToPriorityQueue()Triggerable Withdrawals and CSM v2 security review · Statemind · 19 Sep 2025Acknowledged
The report gives no description here.
Open the reportMediumGriefing TriggerableWithdrawalsGateway limitsTriggerable Withdrawals and CSM v2 security review · Statemind · 19 Sep 2025Acknowledged
The report gives no description here.
Open the reportShow 10 more
MediumUsers may not get ProposalTimelock days to veto ProposalsLido DG · Certora · 5 Feb 2025Acknowledged
The report gives no description here.
Open the reportMediumZero ratio after rounding during division in NGOLisLaunchnodes Lido Liquid Staking · OXORIO · 13 Dec 2024Acknowledged
The report gives no description here.
Open the reportMediumInfinity approval to Withdrawal Queue may present problems for Escrow and DG systemDual Governance security review · Statemind · 25 Oct 2024Acknowledged
The report gives no description here.
Open the reportMediumA single staking module can block whole depositsAcknowledged
The report gives no description here.
MediumCross-token limit works correctly only with stablecoins in TopUpAllowedRecipientsAcknowledged
The report gives no description here.
MediumDEPOSIT CALL DATA NOT INCLUDED IN GUARDIAN SIGNATUREAcknowledged
The report gives no description here.
MediumDeposits through DepositSecurityModule can be blocked by front-runAcknowledged
The report gives no description here.
MediumExcessive penaltyAcknowledged
The report gives no description here.
MediumFastLane length change leads to the disruption of the voting logicAcknowledged
The report gives no description here.
MediumGuardian may cancel updateGuardianAcknowledged
The report gives no description here.
Show 10 more
MediumManipulating active validators countAcknowledged
The report gives no description here.
MediumPossible to execute expired actionSet in the futureAcknowledged
The report gives no description here.
MediumQuorum change leads to the disruption of the voting logicAcknowledged
The report gives no description here.
MediumRestriction of total feeAcknowledged
The report gives no description here.
MediumWithdrawn stETH is not fully burntAcknowledged
The report gives no description here.
LowUnreachable branch in the submit delay calculationLido Oracle V8_1 security review · Composable Security · 9 Sep 2026Acknowledged
The report gives no description here.
Open the reportLowDaily spend cap straddlingLido NEST · ack3 · 24 Jul 2026Acknowledged
The report gives no description here.
Open the reportLowEmpty revert data breaks observer isolationLido NEST · ack3 · 24 Jul 2026Acknowledged
The report gives no description here.
Open the reportLowTimed price mismatch in buyback budgetLido NEST · ack3 · 24 Jul 2026Acknowledged
The report gives no description here.
Open the reportLowUnconverted Revenue Excluded From BaselinesLido NEST · ack3 · 24 Jul 2026Acknowledged
The report gives no description here.
Open the reportShow 10 more
LowBaseModule.updateDepositInfo() and BaseModule.updateDepositableValidatorsCount() lack an operatorexistence checkLido CSM v3 and CM v2 security review · Statemind · 30 Jun 2026Acknowledged
The report gives no description here.
Open the reportLowDeprecated referrer parameter is still accepted and emittedLido CSM v3 and CM v2 security review · Statemind · 30 Jun 2026Acknowledged
The report gives no description here.
Open the reportLowExitPenalties.processExitDelayReport() and ExitPenalties.processTriggeredExit() do not verify pubkey & node operator bindingLido CSM v3 and CM v2 security review · Statemind · 30 Jun 2026Acknowledged
The report gives no description here.
Open the reportLowGrouped operator can be configured with zero shareLido CSM v3 and CM v2 security review · Statemind · 30 Jun 2026Acknowledged
The report gives no description here.
Open the reportLowInline role check without dedicated wrapper functionLido CSM v3 and CM v2 security review · Statemind · 30 Jun 2026Acknowledged
The report gives no description here.
Open the reportLowRedundant storage writes and events on unchanged parameter updatesLido CSM v3 and CM v2 security review · Statemind · 30 Jun 2026Acknowledged
The report gives no description here.
Open the reportLowEnd-of-period validator balances attributed across earlier frames for fee distributionLido Oracle V8 security review · Composable Security · 24 Jun 2026Acknowledged
The report gives no description here.
Open the reportLowExit order share-rate predicate uses absolute excess instead of relative deviationLido Oracle V8 security review · Composable Security · 24 Jun 2026Acknowledged
The report gives no description here.
Open the reportLowPer-report exit limit overcounts compounding validators that have not been topped upLido Oracle V8 security review · Composable Security · 24 Jun 2026Acknowledged
The report gives no description here.
Open the reportLowRemove redundant consolidating as source guard in exit predicatesLido Oracle V8 security review · Composable Security · 24 Jun 2026Acknowledged
The report gives no description here.
Open the reportShow 10 more
LowRemove slashed validators from network performance aggregateLido Oracle V8 security review · Composable Security · 24 Jun 2026Acknowledged
The report gives no description here.
Open the reportLowStaking module performance state initialization crashes when epochs_per_frame is reconfiguredLido Oracle V8 security review · Composable Security · 24 Jun 2026Acknowledged
The report gives no description here.
Open the reportLowConsolidations create inconsistencies in CMv2 key balance accountingLido CSM v3 and CM v2 audit · Certora · 17 Mar 2026Acknowledged
The report gives no description here.
Open the reportLowInitial deposit allocator's count-based fairness math systematically biases CMv2 stake distributionLido CSM v3 and CM v2 audit · Certora · 17 Mar 2026Acknowledged
The report gives no description here.
Open the reportLowkeyConfirmedBalance can be stale in case of prover failure, leading to incorrect withdrawal report penalty accountingLido CSM v3 and CM v2 audit · Certora · 17 Mar 2026Acknowledged
The report gives no description here.
Open the reportLowTop ups to validators that are in exit queue, create 2 valid withdrawal requestsLido CSM v3 and CM v2 audit · Certora · 17 Mar 2026Acknowledged
The report gives no description here.
Open the reportLowIf shares rate is less than 1 anyone can transfer shares from anyone elseLido V3 · Certora · 10 Jan 2026Acknowledged
The report gives no description here.
Open the reportLowSolidity 0.4.24 allocates more memory than neededLido V3 · Certora · 10 Jan 2026Acknowledged
The report gives no description here.
Open the reportLowSetting IPFS parameters explicitlyLido Oracle V7 security review · Composable Security · 12 Dec 2025Acknowledged
The report gives no description here.
Open the reportLowUse expiration time for auth tokensLido Oracle V7 security review · Composable Security · 12 Dec 2025Acknowledged
The report gives no description here.
Open the reportShow 10 more
LowKubo RPC API Bound to 0.0.0.0Lido V3 Oracle V7 · Certora · 10 Dec 2025Acknowledged
The report gives no description here.
Open the reportLowLack of Validation in Event HandlingLido V3 Oracle V7 · Certora · 10 Dec 2025Acknowledged
The report gives no description here.
Open the reportLowMerkle Tree Validation Missing Leaf CountLido V3 Oracle V7 · Certora · 10 Dec 2025Acknowledged
The report gives no description here.
Open the reportLowMissing IPFS Data ValidationLido V3 Oracle V7 · Certora · 10 Dec 2025Acknowledged
The report gives no description here.
Open the reportLowPrometheus Server Bound to 0.0.0.0Lido V3 Oracle V7 · Certora · 10 Dec 2025Acknowledged
The report gives no description here.
Open the reportLow[CSM] Keys removal logic can be optimizedTriggerable Withdrawals and CSM v2 security review · Statemind · 19 Sep 2025Acknowledged
The report gives no description here.
Open the reportLow[CSM] Sanity check for referralCurveIdTriggerable Withdrawals and CSM v2 security review · Statemind · 19 Sep 2025Acknowledged
The report gives no description here.
Open the reportLow[CSM] Unclear settlement and compensation timingsTriggerable Withdrawals and CSM v2 security review · Statemind · 19 Sep 2025Acknowledged
The report gives no description here.
Open the reportLowExtra check in the NodeOperatorsRegistry.reportValidatorExitDelay() functionTriggerable Withdrawals and CSM v2 security review · Statemind · 19 Sep 2025Acknowledged
The report gives no description here.
Open the reportLowRedundant version checkTriggerable Withdrawals and CSM v2 security review · Statemind · 19 Sep 2025Acknowledged
The report gives no description here.
Open the reportShow 10 more
LowWithdrawal delays may lead to unjust penaltiesTriggerable Withdrawals and CSM v2 security review · Statemind · 19 Sep 2025Acknowledged
The report gives no description here.
Open the reportLowAvoiding strikes penaltyLido Oracle V6 security review · Composable Security · 21 Aug 2025Acknowledged
The report gives no description here.
Open the reportLowUnfair validator performance checkLido Oracle V6 security review · Composable Security · 21 Aug 2025Acknowledged
The report gives no description here.
Open the reportLowCheck for fastLane member can be bypassed while consensus disabledLido Community Staking Module audit (April 2025) · Ackee Blockchain Security · 8 Apr 2025Acknowledged
The report gives no description here.
Open the reportLowDiscard logic of report may never be usedLido Community Staking Module audit (April 2025) · Ackee Blockchain Security · 8 Apr 2025Acknowledged
The report gives no description here.
Open the reportLowSingle leaf rewards pullingLido Community Staking Module audit (April 2025) · Ackee Blockchain Security · 8 Apr 2025Acknowledged
The report gives no description here.
Open the reportLowLack of rounding epoch to frame in rebase border epoch calculationLido Oracle v5 04-25 security review · Composable Security · 7 Apr 2025Acknowledged
The report gives no description here.
Open the reportLowLoss of rewards in case of omitted frameLido Oracle v5 04-25 security review · Composable Security · 7 Apr 2025Acknowledged
The report gives no description here.
Open the reportLowInconsistent Use of Zero-Address ChecksLido Dual Governance re-audit · OpenZeppelin · 18 Feb 2025Acknowledged
The report gives no description here.
Open the reportLowResealManager Could Make Use of SealableCalls LibraryLido Dual Governance re-audit · OpenZeppelin · 18 Feb 2025Acknowledged
The report gives no description here.
Open the reportShow 10 more
LowMissing functionality for mistaken tokens and ETH withdrawal in NGOLisLaunchnodes Lido Liquid Staking · OXORIO · 13 Dec 2024Acknowledged
The report gives no description here.
Open the reportLowAbility to Vote Multiple Times on the Same Proposal in Tiebreaker ContractsLido Dual Governance audit · OpenZeppelin · 19 Nov 2024Acknowledged
The report gives no description here.
Open the reportLowEscrow.requestNextWithdrawalsBatch Might Be Executed While the Batch Queue Is in a Closed StateLido Dual Governance audit · OpenZeppelin · 19 Nov 2024Acknowledged
The report gives no description here.
Open the reportLowIncorrect Comparison Used for Tiebreaker VotingLido Dual Governance audit · OpenZeppelin · 19 Nov 2024Acknowledged
The report gives no description here.
Open the reportLowAdd system limit for number of proposersDual Governance security review · Statemind · 25 Oct 2024Acknowledged
The report gives no description here.
Open the reportLowCheck for proposal.status in ExecutableProposals._isProposalMarkedCancelled() is required only in one caseDual Governance security review · Statemind · 25 Oct 2024Acknowledged
The report gives no description here.
Open the reportLowChecking arrays' lengthDual Governance security review · Statemind · 25 Oct 2024Acknowledged
The report gives no description here.
Open the reportLowEmergency protection can last longer than MAX_EMERGENCY_PROTECTION_DURATIONDual Governance security review · Statemind · 25 Oct 2024Acknowledged
The report gives no description here.
Open the reportLowEnsure that updating DualGovernance.configProvider doesn't affect the current state of DualGovernanceStateMachineDual Governance security review · Statemind · 25 Oct 2024Acknowledged
The report gives no description here.
Open the reportLowRage Quit support changes due to stETH rebalancesDual Governance security review · Statemind · 25 Oct 2024Acknowledged
The report gives no description here.
Open the reportShow 10 more
LowRe-writing address of the Rage EscrowDual Governance security review · Statemind · 25 Oct 2024Acknowledged
The report gives no description here.
Open the reportLowRedundant governance config validity checkDual Governance security review · Statemind · 25 Oct 2024Acknowledged
The report gives no description here.
Open the reportLowRedundant nonce checkDual Governance security review · Statemind · 25 Oct 2024Acknowledged
The report gives no description here.
Open the reportLowSanity check for Emergency governance and usual GovernanceDual Governance security review · Statemind · 25 Oct 2024Acknowledged
The report gives no description here.
Open the reportLowSanity check for timelock delaysDual Governance security review · Statemind · 25 Oct 2024Acknowledged
The report gives no description here.
Open the reportLowSanity checks for Emergency committeesDual Governance security review · Statemind · 25 Oct 2024Acknowledged
The report gives no description here.
Open the reportLowUsers can unlock only the entire balanceDual Governance security review · Statemind · 25 Oct 2024Acknowledged
The report gives no description here.
Open the reportLowInconsistent naming for ValidatorProxy.operator variableLido on Polygon PR67 · OXORIO · 25 Apr 2022Acknowledged
The report gives no description here.
Open the reportLowMisleading revert message in case of pending fundsLido on Polygon PR67 · OXORIO · 25 Apr 2022Acknowledged
The report gives no description here.
Open the reportLowNot descriptive variable name token2IndexLido on Polygon PR69 · OXORIO · 25 Apr 2022Acknowledged
The report gives no description here.
Open the reportShow 10 more
Low_checkAnnualBalancesIncrease() doesn't include withdrawn etherAcknowledged
The report gives no description here.
Low"Bunker mode" withdrawal implementationAcknowledged
The report gives no description here.
LowA struct can be introduced to improve readabilityAcknowledged
The report gives no description here.
LowActive node operator checkAcknowledged
The report gives no description here.
LowADDING A NODE OPERATOR DOES NOT INCREASE THE NONCEAcknowledged
The report gives no description here.
LowAffecting on burn requestAcknowledged
The report gives no description here.
LowANYONE CAN ALWAYS TRANSFER 1 WEI STETHAcknowledged
The report gives no description here.
LowAvoiding heavy computationsAcknowledged
The report gives no description here.
LowChanging gracePeriod may change actionSets' statusesAcknowledged
The report gives no description here.
LowCheck for fastLane member can be bypassed while consensus disabledAcknowledged
The report gives no description here.
Show 10 more
LowClaim SLOAD reductionAcknowledged
The report gives no description here.
LowConsecutively emitting identical eventsAcknowledged
The report gives no description here.
LowDEADLINE_SLOT_OFFSETAcknowledged
The report gives no description here.
Lowdelegatecall may be unnecessaryAcknowledged
The report gives no description here.
LowDenying duplicate actions may be redundantAcknowledged
The report gives no description here.
LowDepositable ether zero checkAcknowledged
The report gives no description here.
LowDiscard logic of report may never be usedAcknowledged
The report gives no description here.
LowDuplicate voters addresses can be passed to attemptVoteForMultipleAcknowledged
The report gives no description here.
LowEOA has access to change implementations before the startUpgradeAcknowledged
The report gives no description here.
LowEvent parameter can be indexedAcknowledged
The report gives no description here.
Show 10 more
LowExcessive check in Voting._isVoteOpen()Acknowledged
The report gives no description here.
LowExcessive Memory AllocationsAcknowledged
The report gives no description here.
LowExecution ordering may be unexpectedAcknowledged
The report gives no description here.
LowExtra if statement in _checkConsensus methodAcknowledged
The report gives no description here.
LowFloating pragma in the contracts of the scopeAcknowledged
The report gives no description here.
LowFRONTRUNNING INITIALISATIONAcknowledged
The report gives no description here.
LowGas efficent constantsAcknowledged
The report gives no description here.
LowGas InefficienciesAcknowledged
The report gives no description here.
LowGAS OPTIMISATION OF CANDEPOSITAcknowledged
The report gives no description here.
LowGAS OPTIMISATION OF WITHDRAWAL QUEUE INITIALISATIONAcknowledged
The report gives no description here.
Show 10 more
LowGas optimizationAcknowledged
The report gives no description here.
LowGas optimizationAcknowledged
The report gives no description here.
LowGas optimization by replacing memory with calldataAcknowledged
The report gives no description here.
LowGas optimization of the _recipients.length in TopUpAllowedRecipientsAcknowledged
The report gives no description here.
LowGas optimization: MinAllocationAcknowledged
The report gives no description here.
LowGeneral architectural guidelineAcknowledged
The report gives no description here.
LowImpossible to set reportProcessor if the initial epoch is in the futureAcknowledged
The report gives no description here.
LowInconsistency in Voting.canVote() functionAcknowledged
The report gives no description here.
LowInconsistent Event OrderAcknowledged
The report gives no description here.
LowInconsistent naming of function parametersAcknowledged
The report gives no description here.
Show 10 more
LowInconsistent type of stakingLimitAcknowledged
The report gives no description here.
LowIncorrect NatSpec commentsAcknowledged
The report gives no description here.
LowIncreaseVettedValidatorsLimit can temporarily block the addition of a new motion to EasyTrackAcknowledged
The report gives no description here.
LowInefficient storage of relaysAcknowledged
The report gives no description here.
LowLack of minimum and maximum Voting and Objection timeAcknowledged
The report gives no description here.
LowLidoOracle Initialized With Wrong EpochAcknowledged
The report gives no description here.
LowLimits for max depositsAcknowledged
The report gives no description here.
LowLoop gas optimizationAcknowledged
The report gives no description here.
LowMalicious Node OperatorsAcknowledged
The report gives no description here.
Lowmemcpy OptimizationsAcknowledged
The report gives no description here.
Show 10 more
LowMissing dummyImplementation checkAcknowledged
The report gives no description here.
LowMissing length check in loadKeysSigs()Acknowledged
The report gives no description here.
LowMISSING TWO-STEP OWNERSHIP TRANSFERRALAcknowledged
The report gives no description here.
LowMissing zero address validation in multiple contractsAcknowledged
The report gives no description here.
LowNarrow rangeAcknowledged
The report gives no description here.
LowNo appropriate eventAcknowledged
The report gives no description here.
LowNo check for _etherToLockOnWithdrawalQueueAcknowledged
The report gives no description here.
LowNo checks for a different values in the setter functionsAcknowledged
The report gives no description here.
LowNo checks for address zeroAcknowledged
The report gives no description here.
LowNo checks for node operator id and validator indexAcknowledged
The report gives no description here.
Show 10 more
LowNo Events on Important State ChangesAcknowledged
The report gives no description here.
LowNo post deposit root checkAcknowledged
The report gives no description here.
LowNode operator can spamAcknowledged
The report gives no description here.
LowNot deployed dummy implementationAcknowledged
The report gives no description here.
LowOwner has ability to get all the tokensAcknowledged
The report gives no description here.
LowPossibility to deposit the same validator addressAcknowledged
The report gives no description here.
LowPossible overflowAcknowledged
The report gives no description here.
LowPossible risk of DOS via ETH sending into Consensus LayerAcknowledged
The report gives no description here.
LowPossible to create a motion with transfer amount bigger than single transfer limitAcknowledged
The report gives no description here.
LowPrefinalize SLOAD reductionAcknowledged
The report gives no description here.
Show 10 more
LowQueue and deposit requires several government actionsAcknowledged
The report gives no description here.
LowRange restrictionAcknowledged
The report gives no description here.
LowRedundant argumentAcknowledged
The report gives no description here.
LowRedundant checkAcknowledged
The report gives no description here.
LowRedundant checkpoint checkAcknowledged
The report gives no description here.
LowRedundant checksAcknowledged
The report gives no description here.
LowRedundant local variableAcknowledged
The report gives no description here.
LowREDUNDANT STORAGE WRITEAcknowledged
The report gives no description here.
LowRedundant type castingAcknowledged
The report gives no description here.
LowRounding ErrorsAcknowledged
The report gives no description here.
Show 10 more
LowSanityChecker includes withdrawn ether from past reportsAcknowledged
The report gives no description here.
LowsharesAmount Can Be ZeroAcknowledged
The report gives no description here.
LowSingle leaf rewards pullingAcknowledged
The report gives no description here.
LowSoft requirement for transferAcknowledged
The report gives no description here.
LowStakingRouter can return exited validators that hasn't been updatedAcknowledged
The report gives no description here.
LowStuck validators updateAcknowledged
The report gives no description here.
LowThe need to repeat the transactionAcknowledged
The report gives no description here.
LowTransaction censoring is possibleAcknowledged
The report gives no description here.
LowTyping ErrorsAcknowledged
The report gives no description here.
LowUncertain reward withdrawalAcknowledged
The report gives no description here.
Show 5 more
LowUnnecessary Reduction of Vetted Key CountAcknowledged
The report gives no description here.
LowUnused function parametersAcknowledged
The report gives no description here.
LowUnused ImportsAcknowledged
The report gives no description here.
LowUSERS WOULD LOSE THEIR FUNDS IF CLAIMING A WITHDRAWAL REQUEST DIRECTLY TO LIDOAcknowledged
The report gives no description here.
LowVariables can be immutableAcknowledged
The report gives no description here.
Contracts
No deployed address is recorded for these audits.
The reports name a repository or files. Open a report to see its scope.
Show this on your site
Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.
Content
Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.
Style
Format
<head><script src="https://widget.trustblock.run/project-widget.min.js" defer></script></head><body><divdata-tb-project-widgetdata-tb-project-slug="lido"></div></body>
Paste the code where the label should appear. It uses no API credit and updates by itself.
Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us