Lido security record
As of 24 Oct 2026, Lido has 53 audit reports by 13 security firms on Trustblock; the latest is by Composable Security, dated 9 Sep 2026. Those reports list 2 criticals acknowledged and not fixed.
Record last updated . It holds audits and findings, contracts and incidents up to Oct 2026. Trustblock does not review code.
Audits53
Newest first
1 other security report listed, not counted
| Audit | Security firm | Date | Scope | Critical findings | Report |
|---|---|---|---|---|---|
| Lido on Polygon PR67 | Security firm: OXORIO | Date: | Scope: Repository at commit b992dc6 | No open critical findings | Open · audits.oxor.io |
| Lido on Polygon PR69 | Security firm: OXORIO | Date: | Scope: Repository at commit 1d8e469 | No open critical findings | Open · audits.oxor.io |
| Lido Easy Track security review | Security firm: Sigma Prime | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| Lido Dc4bc security review | Security firm: Sigma Prime | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
Findings591
Statuses are the security firm’s own, from each report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 2 | 12 |
| High | 0 | 3 | 32 |
| Medium | 0 | 20 | 73 |
| Low | 1 | 160 | 288 |
CriticalLocked value not updated when tier changes reserve requirementsLido V3 · Certora · 10 Jan 2026Fixed
The report gives no description here.
Open the reportCriticalDOS on Proposers.sol::unregister due to the last proposer's ExecutorData not getting updatedLido DG · Certora · 5 Feb 2025Fixed
The report gives no description here.
Open the reportCriticalEvading the RageQuit's second sealLido DG · Certora · 5 Feb 2025Fixed
The report gives no description here.
Open the reportCriticalContract lock risk on initial stake in NGOLisLaunchnodes Lido Liquid Staking · OXORIO · 13 Dec 2024Fixed
The report gives no description here.
Open the reportCriticalDecrease in stETH balance due to slashing or penalties is not accounted for in NGOLisLaunchnodes Lido Liquid Staking · OXORIO · 13 Dec 2024Fixed
The report gives no description here.
Open the reportCriticalRounding during division leads to accumulation of undistributed rewards on the contract in NGOLisLaunchnodes Lido Liquid Staking · OXORIO · 13 Dec 2024Fixed
The report gives no description here.
Open the reportCriticalThe setImplementetion function is executed without authorization in NGOLisFactoryLaunchnodes Lido Liquid Staking · OXORIO · 13 Dec 2024Fixed
The report gives no description here.
Open the reportCriticalUnrestricted withdrawal of small stETH/wstETH amounts in NGOLisLaunchnodes Lido Liquid Staking · OXORIO · 13 Dec 2024Fixed
The report gives no description here.
Open the reportCriticalWithdrawal of more ETH from the protocol than returned by Lido in NGOLisLaunchnodes Lido Liquid Staking · OXORIO · 13 Dec 2024Fixed
The report gives no description here.
Open the reportCriticalIncorrect recovery of totalBuffered parameter in StMaticFixed
The report gives no description here.
Show 10 more
CriticalReentrancy in depositing buffered etherFixed
The report gives no description here.
CriticalSTEALING ETH USING DISCOUNT FACTOR BY PASSFixed
The report gives no description here.
HighMissing pending top ups in CL pending balance calculationLido Oracle V8 security review · Composable Security · 24 Jun 2026Fixed
The report gives no description here.
Open the reportHighUndercollateralized mint of stETHLido Oracle V7 security review · Composable Security · 12 Dec 2025Fixed
The report gives no description here.
Open the reportHighDouble Counting of end-of-frame block When Calculating Liquidity FeesLido V3 Oracle V7 · Certora · 10 Dec 2025Fixed
The report gives no description here.
Open the reportHighNegative APR Leads to DOSLido V3 Oracle V7 · Certora · 10 Dec 2025Fixed
The report gives no description here.
Open the reportHighDeposits denial of serviceLido Csm V2 · Ackee Blockchain Security · 16 Sep 2025Fixed
The report gives no description here.
Open the reportHighIncorrect enqueued keys accountingLido Csm V2 · Ackee Blockchain Security · 16 Sep 2025Fixed
The report gives no description here.
Open the reportHighcancelAllPendingProposals() is callable in any stateLido DG · Certora · 5 Feb 2025Fixed
The report gives no description here.
Open the reportHighgetVetoerState() doesn't return the right unstETHLockedShares valueLido DG · Certora · 5 Feb 2025Fixed
The report gives no description here.
Open the reportShow 10 more
HighGriefing _batchesQueue.close()Lido DG · Certora · 5 Feb 2025Fixed
The report gives no description here.
Open the reportHighRageQuit can fail to start even after the threshold have passed by frontrunLido DG · Certora · 5 Feb 2025Fixed
The report gives no description here.
Open the reportHighRageQuit is DOS-d if the minimum amount of stEth to withdraw is 0Lido DG · Certora · 5 Feb 2025Fixed
The report gives no description here.
Open the reportHightieBreakerResumeSealable has no call to activateNextState before checking for a tieLido DG · Certora · 5 Feb 2025Fixed
The report gives no description here.
Open the reportHighIncorrect update of lastNGOBalance in NGOLisLaunchnodes Lido Liquid Staking · OXORIO · 13 Dec 2024Fixed
The report gives no description here.
Open the reportHighRisk of Zero Calculation for Low _ratio and _ngoAssets in NGOLisLaunchnodes Lido Liquid Staking · OXORIO · 13 Dec 2024Fixed
The report gives no description here.
Open the reportHighUnderflow occurring during validator slashing events in NGOLisLaunchnodes Lido Liquid Staking · OXORIO · 13 Dec 2024Fixed
The report gives no description here.
Open the reportHighUnderflow when attempting to withdraw asset from prevRewards in NGOLisLaunchnodes Lido Liquid Staking · OXORIO · 13 Dec 2024Fixed
The report gives no description here.
Open the reportHighUnwithdrawable balance after withdrawal in NGOLisLaunchnodes Lido Liquid Staking · OXORIO · 13 Dec 2024Fixed
The report gives no description here.
Open the reportHighAttackers can make submit and requestWithdraw fail with out-of-gasLido on Polygon PR67 · OXORIO · 25 Apr 2022Fixed
The report gives no description here.
Open the reportShow 10 more
HighDOS via Uninitialized EasyTrack Implementation ContractLido Easy Track security review · Sigma Prime · 1 Oct 2021Fixed
The report gives no description here.
Open the reportHighBAD ACTOR CAN BLOCK LIDO DEPOSIT FUNCTIONFixed
The report gives no description here.
HighIncorrect require leads to DOSFixed
The report gives no description here.
HighNot matching interfaceFixed
The report gives no description here.
HighrecoverERC20 will revert for some tokensFixed
The report gives no description here.
HighSHARE RATE CAN BE NEGATIVELY INFLUENCED DUE TO SHARES BURN LIMITFixed
The report gives no description here.
HighStaking module can block withdrawal credential changing and oracleFixed
The report gives no description here.
HighStaking Rewards Incorrect TrimmingFixed
The report gives no description here.
HighUser may loose their funds if msg.value, maxGas_ or gasPriceBid_ is lowFixed
The report gives no description here.
HighVyper compiler bugFixed
The report gives no description here.
Show 10 more
HighWithdrawal NFT burning after transfer to selfFixed
The report gives no description here.
HighWITHDRAWAL REQUEST FINALISATION WILL ALWAYS REVERTFixed
The report gives no description here.
HighWrong NFT balanceFixed
The report gives no description here.
HighZero deposits allocation after the pause the one of staking modulesFixed
The report gives no description here.
MediumExternal operator data length mismatch between on-chain and off-chainLido Oracle V8 security review · Composable Security · 24 Jun 2026Fixed
The report gives no description here.
Open the reportMediumIncorrect slashings ring buffer projection can under-estimate midterm slashing penaltyLido Oracle V8 security review · Composable Security · 24 Jun 2026Fixed
The report gives no description here.
Open the reportMediumInfinite loop in get_node_operator_weight if dormant curated module weight branch is enabledLido Oracle V8 security review · Composable Security · 24 Jun 2026Fixed
The report gives no description here.
Open the reportMediumIntra-frame CL rebase correction ignores pending top-ups on existing validatorsLido Oracle V8 security review · Composable Security · 24 Jun 2026Fixed
The report gives no description here.
Open the reportMediumInvalid type of returned valueLido Oracle V8 security review · Composable Security · 24 Jun 2026Fixed
The report gives no description here.
Open the reportMediumInvalid weights for CMv1 Node OperatorsLido Oracle V8 security review · Composable Security · 24 Jun 2026Fixed
The report gives no description here.
Open the reportShow 10 more
MediumOverstated buffered ether allocated for withdrawal finalizationLido Oracle V8 security review · Composable Security · 24 Jun 2026Fixed
The report gives no description here.
Open the reportMediumPredictable target balance includes pending consolidations whose source can be slashedLido Oracle V8 security review · Composable Security · 24 Jun 2026Fixed
The report gives no description here.
Open the reportMediumRedemptions can increase due to rounding in settlementLido V3 · Certora · 10 Jan 2026Fixed
The report gives no description here.
Open the reportMediumShortfall rebalance insufficient for vault healthLido V3 · Certora · 10 Jan 2026Fixed
The report gives no description here.
Open the reportMediumFlawed ETH/USD routingLido Stonks 2. · Ackee Blockchain Security · 12 Dec 2025Fixed
The report gives no description here.
Open the reportMediumInvalid CID for large filesLido Oracle V7 security review · Composable Security · 12 Dec 2025Fixed
The report gives no description here.
Open the reportMediumInvalid total value for predeposited validatorsLido Oracle V7 security review · Composable Security · 12 Dec 2025Fixed
The report gives no description here.
Open the reportMediumMissing Fees Calculation on VaultConnectionUpdated EventLido V3 Oracle V7 · Certora · 10 Dec 2025Fixed
The report gives no description here.
Open the reportMediumMissing IPFS CID VerificationLido V3 Oracle V7 · Certora · 10 Dec 2025Fixed
The report gives no description here.
Open the reportMedium[CSM] CSModule.getNodeOperatorSummary() does not cover all casesTriggerable Withdrawals and CSM v2 security review · Statemind · 19 Sep 2025Fixed
The report gives no description here.
Open the reportShow 10 more
MediumPenalties for invalid requestsTriggerable Withdrawals and CSM v2 security review · Statemind · 19 Sep 2025Fixed
The report gives no description here.
Open the reportMediumprocessExitDelayReport griefingLido Csm V2 · Ackee Blockchain Security · 16 Sep 2025Fixed
The report gives no description here.
Open the reportMediumNon-optimistic vetting & unbonded keys bad accountingLido Community Staking Module audit (April 2025) · Ackee Blockchain Security · 8 Apr 2025Fixed
The report gives no description here.
Open the reportMediumNode Operator can exit and slash their validator to move withdrawal finalization border epochLido Oracle v5 04-25 security review · Composable Security · 7 Apr 2025Fixed
The report gives no description here.
Open the reportMediumUncaught exception on creating ejection reportLido Oracle v5 04-25 security review · Composable Security · 7 Apr 2025Fixed
The report gives no description here.
Open the reportMediumcancelAllPendingProposals does not trigger a state transitionLido DG · Certora · 5 Feb 2025Fixed
The report gives no description here.
Open the reportMediumFront loading non-existing proposalsLido DG · Certora · 5 Feb 2025Fixed
The report gives no description here.
Open the reportMediumHashConsensus.scheduledAt is not updated when the user changes their vote from true to false to trueLido DG · Certora · 5 Feb 2025Fixed
The report gives no description here.
Open the reportMediumLack of access control for TiebreakerSubCommittee.seala bleResumeLido DG · Certora · 5 Feb 2025Fixed
The report gives no description here.
Open the reportMediumOverride proposal statusLido DG · Certora · 5 Feb 2025Fixed
The report gives no description here.
Open the reportShow 10 more
MediumQuorum change with pending votesLido DG · Certora · 5 Feb 2025Fixed
The report gives no description here.
Open the reportMediumrequestWithdrawals() can be called whenRageQuit should have startedLido DG · Certora · 5 Feb 2025Fixed
The report gives no description here.
Open the reportMediumState transition to RageQuit isn’t persisted when it should beLido DG · Certora · 5 Feb 2025Fixed
The report gives no description here.
Open the reportMediumtieBreakerScheduleProposal does not trigger a state transition which will lead to wrong state post executionLido DG · Certora · 5 Feb 2025Fixed
The report gives no description here.
Open the reportMediumuint256 rageQuitRound = Math.min(self.rageQuitRound + 1, type(uint8).max); will revert when self.rageQuitRound == type(uint8).maxLido DG · Certora · 5 Feb 2025Fixed
The report gives no description here.
Open the reportMediumEquality of minimum values for different tokens wstEth and stEth in NGOLisLaunchnodes Lido Liquid Staking · OXORIO · 13 Dec 2024Fixed
The report gives no description here.
Open the reportMediumFunction __ReentrancyGuard_init is not called during initialization in NGOLisLaunchnodes Lido Liquid Staking · OXORIO · 13 Dec 2024Fixed
The report gives no description here.
Open the reportMediumInconsistency in the calculation of userTotalShareWithNgoReward and rewardToNgo in NGOLisLaunchnodes Lido Liquid Staking · OXORIO · 13 Dec 2024Fixed
The report gives no description here.
Open the reportMediumIncorrect value in the WithdrawClaimed event in NGOLisLaunchnodes Lido Liquid Staking · OXORIO · 13 Dec 2024Fixed
The report gives no description here.
Open the reportMediumInsufficient validation of the size of _amount for withdrawal requests in NGOLisLaunchnodes Lido Liquid Staking · OXORIO · 13 Dec 2024Fixed
The report gives no description here.
Open the reportShow 10 more
MediumPossible to pass a zero _amount in NGOLisLaunchnodes Lido Liquid Staking · OXORIO · 13 Dec 2024Fixed
The report gives no description here.
Open the reportMediumPossible to receive a zero amount of shares when converting non-zero assets in NGOLisLaunchnodes Lido Liquid Staking · OXORIO · 13 Dec 2024Fixed
The report gives no description here.
Open the reportMediumProxy creation uses ERC1967Proxy instead of NGOLisProxy in NGOLisFactoryLaunchnodes Lido Liquid Staking · OXORIO · 13 Dec 2024Fixed
The report gives no description here.
Open the reportMediumStakeInfo is not updated during withdraw operations in NGOLisLaunchnodes Lido Liquid Staking · OXORIO · 13 Dec 2024Fixed
The report gives no description here.
Open the reportMediumUser does not receive rewards for staking when shares == 0 in NGOLisLaunchnodes Lido Liquid Staking · OXORIO · 13 Dec 2024Fixed
The report gives no description here.
Open the reportMediumUsers cannot withdraw stuck funds from the contract in NGOLisLaunchnodes Lido Liquid Staking · OXORIO · 13 Dec 2024Fixed
The report gives no description here.
Open the reportMediumMAX_EMERGENCY_PROTECTION_DURATION set to Incorrect ValueLido Dual Governance audit · OpenZeppelin · 19 Nov 2024Fixed
The report gives no description here.
Open the reportMediumIncorrect configuration of MAX_EMERGENCY_PROTECTION_DURATIONDual Governance security review · Statemind · 25 Oct 2024Fixed
The report gives no description here.
Open the reportMediumIncorrect deployment can break TiebreakerCoreCommitteeDual Governance security review · Statemind · 25 Oct 2024Fixed
The report gives no description here.
Open the reportMediumPossible DG state change due to unstETH finalizationDual Governance security review · Statemind · 25 Oct 2024Fixed
The report gives no description here.
Open the reportShow 10 more
MediumKafka Does Not Handle JSON Errors GracefullyLido Dc4bc security review · Sigma Prime · 1 Jul 2021Fixed
The report gives no description here.
Open the reportMediumPotential Index Out of Bounds PanicLido Dc4bc security review · Sigma Prime · 1 Jul 2021Fixed
The report gives no description here.
Open the reportMediumreinitDKG Can Be Called Multiple Times With The Same IDLido Dc4bc security review · Sigma Prime · 1 Jul 2021Fixed
The report gives no description here.
Open the reportMediumBlocking rewards distributionFixed
The report gives no description here.
MediumCompiler version is not fixedFixed
The report gives no description here.
MediumDummy Iterations Can Be AvoidedFixed
The report gives no description here.
MediumFINALISATION SHARE RATE SANITY CHECK DOES NOT TAKE POSTPONED SHARE BURNING INTO ACCOUNTFixed
The report gives no description here.
MediumINACTIVE NODE OPERATOR CAN ALWAYS BLOCK DEPOSITSFixed
The report gives no description here.
MediumKafka Does Not Handle JSON Errors GracefullyFixed
The report gives no description here.
MediumLIDO DOES NOT CHECK ACTUAL AMOUNT FROM LIDOEXECUTIONLAYERREWARDSVAU LT REWARDS WITHDRAWALFixed
The report gives no description here.
Show 10 more
MediumMemUtils.memcpy Mask Is WrongFixed
The report gives no description here.
MediumMissing zero address validation for recepient leads to possible loss of fund in TopUpAllowedRecipientsFixed
The report gives no description here.
MediumNo check for return value size in isValidSignature()Fixed
The report gives no description here.
MediumNodeOperatorsRegistry keys nonce doesn't changeFixed
The report gives no description here.
MediumNon-optimistic vetting & unbonded keys bad accountingFixed
The report gives no description here.
MediumNot all the ERC20 tokens are supportedFixed
The report gives no description here.
MediumPossible to set stuck/exited validators count to be bigger than depositedFixed
The report gives no description here.
MediumPossible to submit report extra data in the next frame after the reportFixed
The report gives no description here.
MediumPotential Index Out of Bounds PanicFixed
The report gives no description here.
MediumreinitDKG Can Be Called Multiple Times With The Same IDFixed
The report gives no description here.
Show 10 more
MediumreportProcessor can have a report that doesn't reach a consensusFixed
The report gives no description here.
MediumSafeERC20 not used for approveFixed
The report gives no description here.
MediumUnexpected behavior for tokens with non-standard decimals valueFixed
The report gives no description here.
MediumWITHDRAWALS ACCRUED REWARDS ARE NOT DISTRIBUTED AMONG STAKERSFixed
The report gives no description here.
MediumWrong Burnt shares calculationFixed
The report gives no description here.
MediumWrong burntWithdrawalsShares calculationFixed
The report gives no description here.
MediumWrong offsets for stuck and refunded validatorsFixed
The report gives no description here.
LowMisleading warning about a pending key rotationLido Oracle V8_1 security review · Composable Security · 9 Sep 2026Fixed
The report gives no description here.
Open the reportLowStale signer used for the extra data transactionLido Oracle V8_1 security review · Composable Security · 9 Sep 2026Fixed
The report gives no description here.
Open the reportLowUnconfirmed telemetry transaction reported as sentLido Oracle V8_1 security review · Composable Security · 9 Sep 2026Fixed
The report gives no description here.
Open the reportShow 10 more
LowAllocationStatus enum desynchronizationLido NEST · ack3 · 24 Jul 2026Fixed
The report gives no description here.
Open the reportLowFailed revenue source recoveryLido NEST · ack3 · 24 Jul 2026Fixed
The report gives no description here.
Open the reportLowIncomplete Stonks switch wind-downLido NEST · ack3 · 24 Jul 2026Fixed
The report gives no description here.
Open the reportLowRecovered revenue reweighted by increased surplus shareLido NEST · ack3 · 24 Jul 2026Fixed
The report gives no description here.
Open the reportLowUnfillable buyback order slotLido NEST · ack3 · 24 Jul 2026Fixed
The report gives no description here.
Open the reportLow.length is re-evaluated on every iteration in for-loopsLido CSM v3 and CM v2 security review · Statemind · 30 Jun 2026Fixed
The report gives no description here.
Open the reportLowBondCurve.getBondAmountByKeysCount() and BondCurve.getKeysCountByBondAmount() revert with a generic panic for invalid curveIdLido CSM v3 and CM v2 security review · Statemind · 30 Jun 2026Fixed
The report gives no description here.
Open the reportLowCharge penalty recipient setter does not reject stETH addressLido CSM v3 and CM v2 security review · Statemind · 30 Jun 2026Fixed
The report gives no description here.
Open the reportLowCuratedDepositAllocator._computeAllocations() precondition n > 0 is not enforced by CuratedDepositAllocator.allocateInitialDeposits()Lido CSM v3 and CM v2 security review · Statemind · 30 Jun 2026Fixed
The report gives no description here.
Open the reportLowCuratedModule._updateDepositInfo() duplicates the BaseModule implementation instead of calling superLido CSM v3 and CM v2 security review · Statemind · 30 Jun 2026Fixed
The report gives no description here.
Open the reportShow 10 more
LowDuplicate key pointer encoding logic in WithdrawnValidatorLibLido CSM v3 and CM v2 security review · Statemind · 30 Jun 2026Fixed
The report gives no description here.
Open the reportLowGas OptimizationsLido CSM v3 and CM v2 security review · Statemind · 30 Jun 2026Fixed
The report gives no description here.
Open the reportLowInconsistent top-up eligibility and quantization can reduce effective distributionLido CSM v3 and CM v2 security review · Statemind · 30 Jun 2026Fixed
The report gives no description here.
Open the reportLowMinor gas optimizationsLido CSM v3 and CM v2 security review · Statemind · 30 Jun 2026Fixed
The report gives no description here.
Open the reportLowMinor gas optimizationsLido CSM v3 and CM v2 security review · Statemind · 30 Jun 2026Fixed
The report gives no description here.
Open the reportLowMissing bond curve existence validation causes unnecessary global refreshesLido CSM v3 and CM v2 security review · Statemind · 30 Jun 2026Fixed
The report gives no description here.
Open the reportLowMissing input validation enables key-pointer collision in view return valuesLido CSM v3 and CM v2 security review · Statemind · 30 Jun 2026Fixed
The report gives no description here.
Open the reportLowMultiple interface errors are not usedLido CSM v3 and CM v2 security review · Statemind · 30 Jun 2026Fixed
The report gives no description here.
Open the reportLowUnused custom errors and a redundant inline interfaceLido CSM v3 and CM v2 security review · Statemind · 30 Jun 2026Fixed
The report gives no description here.
Open the reportLowDocument or enforce the consolidationsource invariant for predictable balance helpersLido Oracle V8 security review · Composable Security · 24 Jun 2026Fixed
The report gives no description here.
Open the reportShow 10 more
LowEjector deposit lock uses current reserve instead of the per-frame reserve targetLido Oracle V8 security review · Composable Security · 24 Jun 2026Fixed
The report gives no description here.
Open the reportLowFix comment in VEBO exit-order tableLido Oracle V8 security review · Composable Security · 24 Jun 2026Fixed
The report gives no description here.
Open the reportLowRemove unused functions from production codeLido Oracle V8 security review · Composable Security · 24 Jun 2026Fixed
The report gives no description here.
Open the reportLowStale find_frame cache is not cleared when staking module oracle state is resetLido Oracle V8 security review · Composable Security · 24 Jun 2026Fixed
The report gives no description here.
Open the reportLowMissing isValidatorSlashed check in capTopUpLimitsByKeyBalance() lets stale top-up witnesses race the slashing proof pathLido CSM v3 and CM v2 audit · Certora · 17 Mar 2026Fixed
The report gives no description here.
Open the reportLowRebalance preview calculation inconsistencyLido Vault Wrapper · Ackee Blockchain Security · 6 Feb 2026Fixed
The report gives no description here.
Open the reportLowSocializedLoss event emits incorrect asset amountLido Vault Wrapper · Ackee Blockchain Security · 6 Feb 2026Fixed
The report gives no description here.
Open the reportLowDefault tier params not validated during initializationLido V3 · Certora · 10 Jan 2026Fixed
The report gives no description here.
Open the reportLowMissing connection check allows operations on disconnected vaultsLido V3 · Certora · 10 Jan 2026Fixed
The report gives no description here.
Open the reportLowZero external shares despite non-zero vault liabilities due to roundingLido V3 · Certora · 10 Jan 2026Fixed
The report gives no description here.
Open the reportShow 10 more
LowAmount Truncation In Deposit Message Signature ValidationLido security review · Sigma Prime · 1 Jan 2026Fixed
The report gives no description here.
Open the reportLowEmergencyVault::activateRecovery can be DoS by a reverting TAR- GET_VAULT callsLido Vault Middleware Audit Report · Cyfrin · 19 Dec 2025Fixed
The report gives no description here.
Open the reportLowERC4626Adapter::maxMint doesn’t consider pending fees to be harvested which leads to under-calculating the real shares that can be mintedLido Vault Middleware Audit Report · Cyfrin · 19 Dec 2025Fixed
The report gives no description here.
Open the reportLowERC4626Adapter::maxMint reverts for uncapped target vaultsLido Vault Middleware Audit Report · Cyfrin · 19 Dec 2025Fixed
The report gives no description here.
Open the reportLowGriefing attack on depositors by manipulating the exchange rate during recoveryMode via a donation of TARGET_VAULTs shares in between emergencyMode and recoveryModeLido Vault Middleware Audit Report · Cyfrin · 19 Dec 2025Fixed
The report gives no description here.
Open the reportLowNon-compliant events emitted on vault deposits and withdrawalsLido Vault Middleware Audit Report · Cyfrin · 19 Dec 2025Fixed
The report gives no description here.
Open the reportLowOrder rounding errorsLido Stonks 2. · Ackee Blockchain Security · 12 Dec 2025Fixed
The report gives no description here.
Open the reportLowRemove deprecated codeLido Oracle V7 security review · Composable Security · 12 Dec 2025Fixed
The report gives no description here.
Open the reportLowStonks can be unpaused after killSwitchLido Stonks 2. · Ackee Blockchain Security · 12 Dec 2025Fixed
The report gives no description here.
Open the reportLowDouble Counting of end-of-frame block When Calculating Liquidity Fees (Partial Fix)Lido V3 Oracle V7 · Certora · 10 Dec 2025Fixed
The report gives no description here.
Open the reportShow 10 more
LowStoracha Upload URL Leak inLido V3 Oracle V7 · Certora · 10 Dec 2025Fixed
The report gives no description here.
Open the reportLow[CSM] CSBondLock.MIN_BOND_LOCK_PERIOD can be zeroTriggerable Withdrawals and CSM v2 security review · Statemind · 19 Sep 2025Fixed
The report gives no description here.
Open the reportLow[CSM] Following Checks-Effects-Interactions pattern when interacting with TriggerableWithdrawalsGatewayTriggerable Withdrawals and CSM v2 security review · Statemind · 19 Sep 2025Fixed
The report gives no description here.
Open the reportLow[CSM] Gas optimizationsTriggerable Withdrawals and CSM v2 security review · Statemind · 19 Sep 2025Fixed
The report gives no description here.
Open the reportLow[CSM] Misleading commentTriggerable Withdrawals and CSM v2 security review · Statemind · 19 Sep 2025Fixed
The report gives no description here.
Open the reportLow[CSM] Missing NatSpec in constructorTriggerable Withdrawals and CSM v2 security review · Statemind · 19 Sep 2025Fixed
The report gives no description here.
Open the reportLow[CSM] Missing sanity check in NOAddresses.changeNodeOperatorRewardAddress()Triggerable Withdrawals and CSM v2 security review · Statemind · 19 Sep 2025Fixed
The report gives no description here.
Open the reportLowExtra check in the ValidatorExitDelayVerifier._getExitRequestDeliveryTimestamp() functionTriggerable Withdrawals and CSM v2 security review · Statemind · 19 Sep 2025Fixed
The report gives no description here.
Open the reportLowGas optimizationTriggerable Withdrawals and CSM v2 security review · Statemind · 19 Sep 2025Fixed
The report gives no description here.
Open the reportLowGas optimizationsTriggerable Withdrawals and CSM v2 security review · Statemind · 19 Sep 2025Fixed
The report gives no description here.
Open the reportShow 10 more
LowInconsistent exit requests eventsTriggerable Withdrawals and CSM v2 security review · Statemind · 19 Sep 2025Fixed
The report gives no description here.
Open the reportLowIncorrect comparison in ValidatorExitDelayVerifier._getSecondsSinceExitIsEligible() functionTriggerable Withdrawals and CSM v2 security review · Statemind · 19 Sep 2025Fixed
The report gives no description here.
Open the reportLowIncorrect NatSpecTriggerable Withdrawals and CSM v2 security review · Statemind · 19 Sep 2025Fixed
The report gives no description here.
Open the reportLowMissing AccountingOracle version updateTriggerable Withdrawals and CSM v2 security review · Statemind · 19 Sep 2025Fixed
The report gives no description here.
Open the reportLowRedundant components in the TriggerableWithdrawalsGateway contractTriggerable Withdrawals and CSM v2 security review · Statemind · 19 Sep 2025Fixed
The report gives no description here.
Open the reportLowTriggerable exits do not increment TOTAL_REQUESTS_PROCESSED_POSITIONTriggerable Withdrawals and CSM v2 security review · Statemind · 19 Sep 2025Fixed
The report gives no description here.
Open the reportLowBond burning denial of serviceLido Csm V2 · Ackee Blockchain Security · 16 Sep 2025Fixed
The report gives no description here.
Open the reportLowDepositable count not updated in migrateToPriorityQueueLido Csm V2 · Ackee Blockchain Security · 16 Sep 2025Fixed
The report gives no description here.
Open the reportLowInconsistent calculation of total requests processedLido Triggerable Withdrawals · Ackee Blockchain Security · 16 Sep 2025Fixed
The report gives no description here.
Open the reportLowInconsistent update of exit limits on config changeLido Triggerable Withdrawals · Ackee Blockchain Security · 16 Sep 2025Fixed
The report gives no description here.
Open the reportShow 10 more
LowIncorrect number of migrated keysLido Csm V2 · Ackee Blockchain Security · 16 Sep 2025Fixed
The report gives no description here.
Open the reportLowRemove deprecated variable and constant namesLido Oracle V6 security review · Composable Security · 21 Aug 2025Fixed
The report gives no description here.
Open the reportLowUse zero-length proofs for rewards and strikes treesLido Oracle V6 security review · Composable Security · 21 Aug 2025Fixed
The report gives no description here.
Open the reportLowBad targetLimit accounting in getNodeOperatorSummaryLido Community Staking Module audit (April 2025) · Ackee Blockchain Security · 8 Apr 2025Fixed
The report gives no description here.
Open the reportLowDepositable keys count not updated in normalizeQueueLido Community Staking Module audit (April 2025) · Ackee Blockchain Security · 8 Apr 2025Fixed
The report gives no description here.
Open the reportLowExecution layer rewards stealing settlement not resetting bond curveLido Community Staking Module audit (April 2025) · Ackee Blockchain Security · 8 Apr 2025Fixed
The report gives no description here.
Open the reportLowExecution layer stealing settlement revertLido Community Staking Module audit (April 2025) · Ackee Blockchain Security · 8 Apr 2025Fixed
The report gives no description here.
Open the reportLowStrict msg.value checkLido Community Staking Module audit (April 2025) · Ackee Blockchain Security · 8 Apr 2025Fixed
The report gives no description here.
Open the reportLowEject validators exitable in upcoming oracle frameLido Oracle v5 04-25 security review · Composable Security · 7 Apr 2025Fixed
The report gives no description here.
Open the reportLowInvalid number of delayed validators stored in PrometheusLido Oracle v5 04-25 security review · Composable Security · 7 Apr 2025Fixed
The report gives no description here.
Open the reportShow 10 more
LowIncomplete Minimum Asset Lock Duration ValidationLido Dual Governance re-audit · OpenZeppelin · 18 Feb 2025Fixed
The report gives no description here.
Open the reportLowlastAssetsLockTimestamp is updated even though unstEthIds = [ ]Lido DG · Certora · 5 Feb 2025Fixed
The report gives no description here.
Open the reportLowremoveSealableWithdrawalBloc ker does not return a boolean or revert when failing to removeLido DG · Certora · 5 Feb 2025Fixed
The report gives no description here.
Open the reportLowSealableCalls.sol.callResume() isPaused flag is wrongLido DG · Certora · 5 Feb 2025Fixed
The report gives no description here.
Open the reportLowwithdrawETH is callable with unstEthIds = [ ]Lido DG · Certora · 5 Feb 2025Fixed
The report gives no description here.
Open the reportLowBalance calculation before checking for stake existence in NGOLisLaunchnodes Lido Liquid Staking · OXORIO · 13 Dec 2024Fixed
The report gives no description here.
Open the reportLowDelay between reward distributions changes after contract initialization in NGOLisLaunchnodes Lido Liquid Staking · OXORIO · 13 Dec 2024Fixed
The report gives no description here.
Open the reportLowEvent name in the specification is misleading in NGOLisFactoryLaunchnodes Lido Liquid Staking · OXORIO · 13 Dec 2024Fixed
The report gives no description here.
Open the reportLowInconsistency in error notification methods in NGOLisLaunchnodes Lido Liquid Staking · OXORIO · 13 Dec 2024Fixed
The report gives no description here.
Open the reportLowInconsistent state variable naming style in NGOLis, NGOLisFactoryLaunchnodes Lido Liquid Staking · OXORIO · 13 Dec 2024Fixed
The report gives no description here.
Open the reportShow 10 more
LowIncorrect event parameter value wstEth instead of stEth in NGOLisLaunchnodes Lido Liquid Staking · OXORIO · 13 Dec 2024Fixed
The report gives no description here.
Open the reportLowInsufficient validation in the case of the very first stake in NGOLisLaunchnodes Lido Liquid Staking · OXORIO · 13 Dec 2024Fixed
The report gives no description here.
Open the reportLowInterface not used in IAccountOracle.solLaunchnodes Lido Liquid Staking · OXORIO · 13 Dec 2024Fixed
The report gives no description here.
Open the reportLowMisleading variable name wstAmount instead of stAmount in NGOLisLaunchnodes Lido Liquid Staking · OXORIO · 13 Dec 2024Fixed
The report gives no description here.
Open the reportLowMissing event emissions in setters in NGOLis, NGOLisFactoryLaunchnodes Lido Liquid Staking · OXORIO · 13 Dec 2024Fixed
The report gives no description here.
Open the reportLowMissing parameter validation in NGOLis, NGOLisFactoryLaunchnodes Lido Liquid Staking · OXORIO · 13 Dec 2024Fixed
The report gives no description here.
Open the reportLowNo _disableInitializers call in the constructor in NGOLisLaunchnodes Lido Liquid Staking · OXORIO · 13 Dec 2024Fixed
The report gives no description here.
Open the reportLowNo parameter validation in NGOLisLaunchnodes Lido Liquid Staking · OXORIO · 13 Dec 2024Fixed
The report gives no description here.
Open the reportLowNo setter parameter validation in NGOLisLaunchnodes Lido Liquid Staking · OXORIO · 13 Dec 2024Fixed
The report gives no description here.
Open the reportLowRedundant check for unsigned value being negative in NGOLisLaunchnodes Lido Liquid Staking · OXORIO · 13 Dec 2024Fixed
The report gives no description here.
Open the reportShow 10 more
LowRedundant increment operation in NGOLisLaunchnodes Lido Liquid Staking · OXORIO · 13 Dec 2024Fixed
The report gives no description here.
Open the reportLowRedundant storage of the totalAssets value in NGOLisLaunchnodes Lido Liquid Staking · OXORIO · 13 Dec 2024Fixed
The report gives no description here.
Open the reportLowSetting msg.sender as owner during deployment in NGOLisFactoryLaunchnodes Lido Liquid Staking · OXORIO · 13 Dec 2024Fixed
The report gives no description here.
Open the reportLowSetting msg.sender instead of owner in the mapping ownerToNgo in NGOLisFactoryLaunchnodes Lido Liquid Staking · OXORIO · 13 Dec 2024Fixed
The report gives no description here.
Open the reportLowSimilar code in identical functions in NGOLisLaunchnodes Lido Liquid Staking · OXORIO · 13 Dec 2024Fixed
The report gives no description here.
Open the reportLowSimultaneous use of uint and uint256 typesLaunchnodes Lido Liquid Staking · OXORIO · 13 Dec 2024Fixed
The report gives no description here.
Open the reportLowSuboptimal computation of user balance in NGOLisLaunchnodes Lido Liquid Staking · OXORIO · 13 Dec 2024Fixed
The report gives no description here.
Open the reportLowSuboptimal handling of storage variables in NGOLisLaunchnodes Lido Liquid Staking · OXORIO · 13 Dec 2024Fixed
The report gives no description here.
Open the reportLowTransfer of zero _fee is possible in NGOLisLaunchnodes Lido Liquid Staking · OXORIO · 13 Dec 2024Fixed
The report gives no description here.
Open the reportLowUnused contracts in NGOLis.sol, NGOLisFactory.solLaunchnodes Lido Liquid Staking · OXORIO · 13 Dec 2024Fixed
The report gives no description here.
Open the reportShow 10 more
LowUnused error in NGOLisLaunchnodes Lido Liquid Staking · OXORIO · 13 Dec 2024Fixed
The report gives no description here.
Open the reportLowUnused variable _prevRewards in NGOLisLaunchnodes Lido Liquid Staking · OXORIO · 13 Dec 2024Fixed
The report gives no description here.
Open the reportLowIncorrect Encoding of Sealable Resume ProposalLido Dual Governance audit · OpenZeppelin · 19 Nov 2024Fixed
The report gives no description here.
Open the reportLowMissing Check in Escrow.requestNextWithdrawalsBatchLido Dual Governance audit · OpenZeppelin · 19 Nov 2024Fixed
The report gives no description here.
Open the reportLowMissing Zero-Address ChecksLido Dual Governance audit · OpenZeppelin · 19 Nov 2024Fixed
The report gives no description here.
Open the reportLowThe Parameters Passed Into The InvalidClaimableAmount Error Are SwappedLido Dual Governance audit · OpenZeppelin · 19 Nov 2024Fixed
The report gives no description here.
Open the reportLowUndocumented ParameterLido Dual Governance audit · OpenZeppelin · 19 Nov 2024Fixed
The report gives no description here.
Open the reportLowAbsence of zero checkDual Governance security review · Statemind · 25 Oct 2024Fixed
The report gives no description here.
Open the reportLowAdditional check when converting to IndexOneBased typeDual Governance security review · Statemind · 25 Oct 2024Fixed
The report gives no description here.
Open the reportLowConsistency in using Timestamps.now()Dual Governance security review · Statemind · 25 Oct 2024Fixed
The report gives no description here.
Open the reportShow 10 more
LowDefine functions as external in HashConsensusDual Governance security review · Statemind · 25 Oct 2024Fixed
The report gives no description here.
Open the reportLowEscrowState.setMinAssetsLockDuration() can be called out of initializationDual Governance security review · Statemind · 25 Oct 2024Fixed
The report gives no description here.
Open the reportLowEvent emission for unfinalized recordsDual Governance security review · Statemind · 25 Oct 2024Fixed
The report gives no description here.
Open the reportLowGas optimisationsDual Governance security review · Statemind · 25 Oct 2024Fixed
The report gives no description here.
Open the reportLowHashConsensus._getHashState() doesn't return historical quorum and supportDual Governance security review · Statemind · 25 Oct 2024Fixed
The report gives no description here.
Open the reportLowImprecise conditions for pause check in ResealManagerDual Governance security review · Statemind · 25 Oct 2024Fixed
The report gives no description here.
Open the reportLowInconsistent naming in Escrow contract and interfaceDual Governance security review · Statemind · 25 Oct 2024Fixed
The report gives no description here.
Open the reportLowInconsistent result of the DualGovernance state view functionsDual Governance security review · Statemind · 25 Oct 2024Fixed
The report gives no description here.
Open the reportLowIncorrect natspecDual Governance security review · Statemind · 25 Oct 2024Fixed
The report gives no description here.
Open the reportLowMissing constructor check for TiebreakerActivationTimeoutDual Governance security review · Statemind · 25 Oct 2024Fixed
The report gives no description here.
Open the reportShow 10 more
LowMissing parameter sanity checksDual Governance security review · Statemind · 25 Oct 2024Fixed
The report gives no description here.
Open the reportLowMissing zero checksDual Governance security review · Statemind · 25 Oct 2024Fixed
The report gives no description here.
Open the reportLowNo sanity check of SanityCheckParamsDual Governance security review · Statemind · 25 Oct 2024Fixed
The report gives no description here.
Open the reportLowProposalType.ResumeSealable is not included in encoding dataDual Governance security review · Statemind · 25 Oct 2024Fixed
The report gives no description here.
Open the reportLowProposer is not saved in proposal dataDual Governance security review · Statemind · 25 Oct 2024Fixed
The report gives no description here.
Open the reportLowRedundant storage arrayDual Governance security review · Statemind · 25 Oct 2024Fixed
The report gives no description here.
Open the reportLowRedundant underflow checksDual Governance security review · Statemind · 25 Oct 2024Fixed
The report gives no description here.
Open the reportLowSome custom errors are never used and incorrect error name is usedDual Governance security review · Statemind · 25 Oct 2024Fixed
The report gives no description here.
Open the reportLowThe WithdrawalsBatchesQueue functions improvementsDual Governance security review · Statemind · 25 Oct 2024Fixed
The report gives no description here.
Open the reportLowTiebreaker condition inconsistencyDual Governance security review · Statemind · 25 Oct 2024Fixed
The report gives no description here.
Open the reportShow 10 more
LowTimelockedGovernance.executeProposal() is not part of IGovernance interfaceDual Governance security review · Statemind · 25 Oct 2024Fixed
The report gives no description here.
Open the reportLowUninitialized TimelockState after deploymentDual Governance security review · Statemind · 25 Oct 2024Fixed
The report gives no description here.
Open the reportLowunregisterProposer gas optimizationDual Governance security review · Statemind · 25 Oct 2024Fixed
The report gives no description here.
Open the reportLowUnused functions in SealableCallsDual Governance security review · Statemind · 25 Oct 2024Fixed
The report gives no description here.
Open the reportLowUse >= instead of == in HashConsensus._vote()Dual Governance security review · Statemind · 25 Oct 2024Fixed
The report gives no description here.
Open the reportLowUse Timestamp type in EnumerableProposals.Proposal structureDual Governance security review · Statemind · 25 Oct 2024Fixed
The report gives no description here.
Open the reportLow0 is used in several meanings in token2IndexLido on Polygon PR69 · OXORIO · 25 Apr 2022Fixed
The report gives no description here.
Open the reportLowComplicated id burning section of codeLido on Polygon PR69 · OXORIO · 25 Apr 2022Fixed
The report gives no description here.
Open the reportLowDuplicate storage readingLido on Polygon PR69 · OXORIO · 25 Apr 2022Fixed
The report gives no description here.
Open the reportLowMagic numbers are usedLido on Polygon PR67 · OXORIO · 25 Apr 2022Fixed
The report gives no description here.
Open the reportShow 10 more
LowNot descriptive variable name lengthLido on Polygon PR69 · OXORIO · 25 Apr 2022Fixed
The report gives no description here.
Open the reportLowNot descriptive variable name tokenIndexLido on Polygon PR69 · OXORIO · 25 Apr 2022Fixed
The report gives no description here.
Open the reportLowNot saving index calculation result to a variable with a meaningful name may decrease readabilityLido on Polygon PR69 · OXORIO · 25 Apr 2022Fixed
The report gives no description here.
Open the reportLowOne-letter variable tLido on Polygon PR69 · OXORIO · 25 Apr 2022Fixed
The report gives no description here.
Open the reportLowReducing readability by using mutable variableLido on Polygon PR69 · OXORIO · 25 Apr 2022Fixed
The report gives no description here.
Open the reportLowLDO Holder DOS PotentialLido Easy Track security review · Sigma Prime · 1 Oct 2021Fixed
The report gives no description here.
Open the reportLowMotion Creators Can Block Creation of Other MotionsLido Easy Track security review · Sigma Prime · 1 Oct 2021Fixed
The report gives no description here.
Open the reportLowSub-Optimal Reentrancy ProtectionsLido Easy Track security review · Sigma Prime · 1 Oct 2021Fixed
The report gives no description here.
Open the reportLowOutdated Prysm DependencyLido Dc4bc security review · Sigma Prime · 1 Jul 2021Fixed
The report gives no description here.
Open the reportLowVerification Script Fragile to WhitespaceLido Dc4bc security review · Sigma Prime · 1 Jul 2021Fixed
The report gives no description here.
Open the reportShow 10 more
LowActive validators calculationFixed
The report gives no description here.
LowAddress of a recipient in ERC20Recovered might be indexed.Fixed
The report gives no description here.
LowArray length checkFixed
The report gives no description here.
LowArray length checkFixed
The report gives no description here.
LowBad targetLimit accounting in getNodeOperatorSummaryFixed
The report gives no description here.
LowBinary search boundaryFixed
The report gives no description here.
LowCalldata location can be used for function parameters in multiple contracts and interfacesFixed
The report gives no description here.
LowChangeNodeOperatorManagers redundant memory allocationFixed
The report gives no description here.
LowCheck arrays lengthFixed
The report gives no description here.
LowclearNodeOperatorPenalty() can be restricted to externalFixed
The report gives no description here.
Show 10 more
LowCode duplicationFixed
The report gives no description here.
LowCode RedundanciesFixed
The report gives no description here.
LowCODE STYLE PROBLEMSFixed
The report gives no description here.
LowCode style recommendationsFixed
The report gives no description here.
LowComment doesn't match the codeFixed
The report gives no description here.
LowCreating a GateSeal with duplicate sealables prevents sealingFixed
The report gives no description here.
LowDepositable keys count not updated in normalizeQueueFixed
The report gives no description here.
LowDEPOSITSECURITYMODULE REDUNDANT STAKING MODULE ID CHECKSFixed
The report gives no description here.
LowDivision before multiplicationFixed
The report gives no description here.
LowDuplication of INodeOperatorsRegistry interfaceFixed
The report gives no description here.
Show 10 more
LowEvent name RelaysUpdated is ambiguousFixed
The report gives no description here.
LowExecution layer rewards stealing settlement not resetting bond curveFixed
The report gives no description here.
LowExecution layer stealing settlement revertFixed
The report gives no description here.
LowExited validators count might be bigger than total depositedFixed
The report gives no description here.
LowFunction _safe_erc20_transfer() doesn't revert if token is not a contractFixed
The report gives no description here.
LowFunction renamingFixed
The report gives no description here.
LowGas optimisationFixed
The report gives no description here.
LowGas optimizationFixed
The report gives no description here.
LowGas optimizationFixed
The report gives no description here.
LowGas optimizationFixed
The report gives no description here.
Show 10 more
LowGas optimizationFixed
The report gives no description here.
LowGas optimizationFixed
The report gives no description here.
LowGas optimizationFixed
The report gives no description here.
LowGas optimization for unlimited allowanceFixed
The report gives no description here.
LowGas optimizations: cyclesFixed
The report gives no description here.
LowGas optimizations: external callsFixed
The report gives no description here.
LowGuard checks for zero secondsPerSlotFixed
The report gives no description here.
LowHardcoded StakingModule limitFixed
The report gives no description here.
LowImport is not usedFixed
The report gives no description here.
LowImproper commentsFixed
The report gives no description here.
Show 10 more
LowInaccurate NatSpec commentsFixed
The report gives no description here.
LowInconsistent delegation checkFixed
The report gives no description here.
LowInconsistent input string for role hashFixed
The report gives no description here.
LowIncorrect checkFixed
The report gives no description here.
LowIncorrect CommentsFixed
The report gives no description here.
LowIncorrect information in the commentFixed
The report gives no description here.
LowInline block.timestampFixed
The report gives no description here.
LowInsufficient checksFixed
The report gives no description here.
LowInsufficient if statement in WithrawalQueueBase contractFixed
The report gives no description here.
LowInsufficient token rate precisionFixed
The report gives no description here.
Show 10 more
LowInterface IssuesFixed
The report gives no description here.
LowIssues With EventsFixed
The report gives no description here.
LowLack of checking approve return value harder errors understandingFixed
The report gives no description here.
LowLack of zero address checkFixed
The report gives no description here.
LowMinimal pause durationFixed
The report gives no description here.
LowMissing checks for _requestId out of rangeFixed
The report gives no description here.
LowMissing spec in TopUpAllowedRecipientsFixed
The report gives no description here.
LowMissing zero check when reporting minted rewardsFixed
The report gives no description here.
LowModifier doesn't guarantee anything, default enum statusFixed
The report gives no description here.
LowModifier onlyAdmin may be misleadingFixed
The report gives no description here.
Show 10 more
LowMultiple transfers of stETH token instead of a single transferFixed
The report gives no description here.
LowNo check if amount to be vested is bigger than 0Fixed
The report gives no description here.
LowNo check on the refSlot in submitting a ConsensusReportFixed
The report gives no description here.
LowNo checks that the EOA deployer passed to the deployed contractsFixed
The report gives no description here.
LowNo zero check for _maxPositiveTokenRebaseFixed
The report gives no description here.
LowNon-callable functionFixed
The report gives no description here.
LowNon-existent Modules Are Active by DefaultFixed
The report gives no description here.
LowNot granted roleFixed
The report gives no description here.
LowNot used parts of codeFixed
The report gives no description here.
LowOutdated Prysm DependencyFixed
The report gives no description here.
Show 10 more
LowOverflow on type castingFixed
The report gives no description here.
LowOwner can renounce ownership disabling recover functionsFixed
The report gives no description here.
LowPayable ownerFixed
The report gives no description here.
LowPenalty delay typeFixed
The report gives no description here.
LowPossible underflow in trimUint256Array()Fixed
The report gives no description here.
LowPotential revert on underflowFixed
The report gives no description here.
LowPragma is not lockedFixed
The report gives no description here.
LowPrecise calculationsFixed
The report gives no description here.
LowPublic function could be declared externalFixed
The report gives no description here.
LowREBASE LIMITER ISLIMITREACHED WILL ALMOST ALWAYS RETURN FALSE DUE TO ROUNDING ERRORFixed
The report gives no description here.
Show 10 more
LowREBASE LIMITER MAXTOTALPOOLEDETHER OPTIMISATIONFixed
The report gives no description here.
LowRecover functions allow sending to address(0)Fixed
The report gives no description here.
LowRedundant ACL checkFixed
The report gives no description here.
LowRedundant asserts in AllowedRecipientsBuilderFixed
The report gives no description here.
LowRedundant initialization in TopUpAllowedRecipientsFixed
The report gives no description here.
LowRedundant onlyRole modifierFixed
The report gives no description here.
LowRedundant v component checkFixed
The report gives no description here.
LowRepetitive constant for nonce valueFixed
The report gives no description here.
LowRequest owner should not be payableFixed
The report gives no description here.
LowRoles mismatchingFixed
The report gives no description here.
Show 10 more
LowSafeERC20 import is unusedFixed
The report gives no description here.
LowSanity Checks MissingFixed
The report gives no description here.
LowSeveral public functions may be declared externalFixed
The report gives no description here.
LowSpecification MismatchFixed
The report gives no description here.
LowSTAKING ROUTER REDUNDANT MODULE ID CHECKSFixed
The report gives no description here.
LowState mutabilityFixed
The report gives no description here.
LowState mutability can be restricted to viewFixed
The report gives no description here.
LowStrict msg.value checkFixed
The report gives no description here.
LowStuck penalty delay extensionFixed
The report gives no description here.
LowThe clearNodeOperatorPenalty returns always falseFixed
The report gives no description here.
Show 10 more
LowThe function claim() doesn't return value claimedFixed
The report gives no description here.
LowThe Second Opinion Oracle Should Return a Unified BalanceFixed
The report gives no description here.
LowTransfer of instructions necessary for initializationFixed
The report gives no description here.
LowType mismatchFixed
The report gives no description here.
LowTypo in _addSigningKeys()Fixed
The report gives no description here.
LowTypo in commentFixed
The report gives no description here.
LowTYPOGRAPHICAL ERRORSFixed
The report gives no description here.
LowTypos in comments/namesFixed
The report gives no description here.
LowUnable to get a consensus state if the quorum is unreachableFixed
The report gives no description here.
LowUnclear commentsFixed
The report gives no description here.
Show 10 more
LowUnclear purpose of limits in Sanity CheckerFixed
The report gives no description here.
LowUnnecessary nonce variable in TokensBridged eventFixed
The report gives no description here.
LowUnnecessary variableFixed
The report gives no description here.
LowUnsafe castingFixed
The report gives no description here.
LowUnsafe mathFixed
The report gives no description here.
LowUnsafe memory handling in getStakingRewardsDistribution()Fixed
The report gives no description here.
LowUntitled findingFixed
No description was provided.
LowUntitled findingFixed
No description was provided.
LowUntitled findingFixed
No description was provided.
LowUntitled findingFixed
No description was provided.
Show 10 more
LowUnused errorsFixed
The report gives no description here.
LowUnused external functionFixed
The report gives no description here.
LowUnused functionFixed
The report gives no description here.
LowUnused return valueFixed
The report gives no description here.
Lowunwrap inconsistent tokens amount in eventFixed
The report gives no description here.
LowUpdating variables after external calls and transfersFixed
The report gives no description here.
LowUseless checkFixed
The report gives no description here.
LowUseless payable conversion for callFixed
The report gives no description here.
LowVerification Script Fragile to WhitespaceFixed
The report gives no description here.
LowVisibility Can Be ReducedFixed
The report gives no description here.
Show 5 more
LowWithdrawal finalization before actual shares burnFixed
The report gives no description here.
LowWITHDRAWAL QUEUE ERC721 OWNEROF GAS OPTIMISATIONFixed
The report gives no description here.
LowWITHDRAWALREQUESTERC721 BALANCE DOES NOT DECREASE AFTER CLAIMINGFixed
The report gives no description here.
LowWrong comment in DepositSecurityModuleFixed
The report gives no description here.
LowWrong event argumentFixed
The report gives no description here.
Contracts
No deployed address is recorded for these audits.
The reports name a repository or files. Open a report to see its scope.
Show this on your site
Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.
Content
Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.
Style
Format
<head><script src="https://widget.trustblock.run/project-widget.min.js" defer></script></head><body><divdata-tb-project-widgetdata-tb-project-slug="lido"></div></body>
Paste the code where the label should appear. It uses no API credit and updates by itself.
Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us