Skip to content
PROTOCOL RESEARCH

Lido risk

The reference ETH liquid-staking protocol: deeply audited, Dual-Governance timelocked with stETH-holder veto, no core exploit in 5+ years, real (not emitted) yield; watch the 9-member oracle committee and peg-and-queue exit timing, not the contracts.
SolidResearched Jul 1, 2026

Scorecard

strong: Audits & contracts99 audit reports; 2026 Cyfrin/Certora/MixBytes/Composable/Sigma Prime work, incl. CircuitBreaker (04-2026) and Oracle v7.1 (03-2026), closed with zero critical or high findings.
strong: Admin controlNo single multisig; Lido DAO under Dual Governance (live 2025) with ~96h timelock and stETH-holder veto/rage-quit.
watch: Oracle9-member Accounting Oracle, 5-of-9 quorum, drives every rebase; guarded by deviation checks and bunker mode but a live trust dependency.
strong: Liquidity & exitNative FIFO withdrawals since V2; stETH:ETH essentially at peg (~1.0002 live); queue can lengthen under mass-exit stress.
strong: Yield (real vs emission)Real ETH consensus plus execution rewards minus 10% fee; no LDO emissions inflate the APR.
watch: Holder concentration~23% of all staked ETH in early 2026, down from a ~32% 2023 peak (Ethereum-level centralization debate, not depositor fund-loss); LDO unlock breakdown _refresh_.
strong: Track recordNo core-protocol exploit in 5+ years; May 2025 Chorus One oracle key compromise cost 1.46 ETH gas, no user funds; April 2026 KelpDAO hack hit a downstream EarnETH vault (~$21.6M), not stETH/core.
🟢 strong🟡 watch / caveat🔴 weak / fund-loss risk
Verdict is a gate (worst flaw wins), not an average. Our read, not financial advice.

Live facts

auto-sourced now
TVL$18.18B
30d↑3%
Audits2
Last hacknone

DeFiLlama + our exploits feed. Cross-check the dated report against today.

TL;DR

Lido is the reference liquid-staking protocol: deposit ETH, hold stETH (rebasing) or wstETH, earn ETH consensus and execution rewards minus a 10% protocol fee. The core contracts have run since 2020 across every market cycle with no successful protocol-level exploit. Governance is a real strength here, not a footnote: the Lido DAO sits under Dual Governance (live since 2025) with a roughly 96h timelock on upgrades, and stETH holders can veto or delay. The two things to actually watch are the 9-member oracle committee (a live trust dependency that drives every rebase) and the stETH:ETH secondary-market peg during the withdrawal-queue wait, not the smart contracts.

Checklist

Audits & contracts. Deeply audited. The Lido docs audits page lists 99 reports for Lido on Ethereum, with 2026 work by Cyfrin (plus Certora Prover formal verification), MixBytes, Composable Security, Sigma Prime and Certora, on top of years of ChainSecurity, OpenZeppelin, Consensys Diligence, Statemind, Ackee, Oxorio and Hexens reviews. The recent CircuitBreaker audit (Cyfrin, 04-2026) and Oracle v7.1 audit (Composable Security, 03-2026) both closed with zero critical or high findings. Admin control. No single multisig owns the core. The Lido DAO (Aragon Agent) operates under Dual Governance: protocol upgrades and critical parameters pass through a roughly 96h timelock, and stETH holders can veto or extend (veto signalling escalates the delay up to ~45 days, with a rage-quit exit). That is the strongest admin posture of any protocol this size. Oracle. The Accounting Oracle is a 9-member committee with a 5-of-9 quorum, finalizing one report per daily frame at about 12:00 UTC. It feeds validator balances that drive the stETH rebase. Deviation checks, rate limits and a bunker mode guard against bad reports. This is the main live trust dependency. Liquidity & exit. Two exit paths: native withdrawals through the FIFO queue (V2, redeems for ETH), or selling stETH on the secondary market. The queue can lengthen under mass-exit stress, and stETH can trade below ETH while you wait. Live ratio this run was essentially at peg (CoinGecko cross-check ~1.0002 on 2026-07-01). Yield: real vs emission. Real. stETH yield is ETH consensus plus execution-layer rewards, minus Lido's 10% fee (split node operators and DAO treasury). No LDO token emissions prop up the staking APR. Holder concentration. The relevant concentration is Ethereum-level, not your-funds-level: Lido is roughly 23% of all staked ETH as of early 2026 (down from a 32% peak in 2023), a recurring centralization debate. The DAO rejected a self-limit in 2022 (99.81% against). LDO governance-token distribution and unlocks: refresh. Track record. No successful core-protocol exploit across five-plus years. A 2021 whitehat bug (node-operator-only, never exploited) was handled via bounty. In May 2025 a compromised oracle hot-wallet key (Chorus One) cost 1.46 ETH in gas with no user funds touched. In April 2026 the third-party KelpDAO rsETH bridge hack hit a downstream Lido EarnETH vault ($21.6M exposure, redemptions paused, relief fund proposed) but did not touch Lido core, stETH or wstETH. Clean at the protocol layer.

Worst case

A quorum of oracle keys is compromised and a false balance report passes deviation checks: rebases misstate, and finalization logic can be gamed. Deviation limits, rate limits and bunker mode exist precisely to bound this, and the roughly 96h Dual Governance timelock gives holders time to react to any malicious upgrade. Separately, in a Terra-style panic the withdrawal queue backs up and stETH trades at a discount on the secondary market; native withdrawals still redeem 1:1 once your slot finalizes, so this is an exit-timing and mark-to-market risk, not a principal-loss one. There is slashing risk on the validator set, historically small and socialized across the pool.

Bottom line

Solid. This is about as battle-tested and well-governed as DeFi infrastructure gets: immutable-adjacent core, Dual Governance with holder veto, no protocol-level hack, real (not emitted) yield. The honest caveats are the 9-member oracle committee as a live dependency, peg-and-queue timing on exit, and the sector-level fact that Lido is a large share of all staked ETH. No fund-loss deal-breaker found.

Data appendix

  • TVL: ~$14.36B (DeFiLlama; live cross-check this run returned $14.359B). 90d / ATH: refresh.
  • Audits: 99 reports listed on docs.lido.fi/security/audits. 2026: Cyfrin (+ Certora formal verification), MixBytes, Composable Security, Sigma Prime, Certora. Historical: ChainSecurity, OpenZeppelin, Consensys Diligence, Statemind, Ackee, Oxorio, Hexens, Sigma Prime. Recent CircuitBreaker (Cyfrin, 04-2026) + Oracle v7.1 (Composable Security, 03-2026) audits: 0 critical, 0 high.
  • Admin/governance: Lido DAO (Aragon Agent) under Dual Governance (live 2025); ~96h timelock on upgrades and critical params; stETH holders can veto or extend (up to ~45 days signalling, rage-quit exit). No single multisig over the core. (Our mig 058 + public sources, verified.)
  • Oracle: Accounting Oracle, 9 members, 5-of-9 quorum, daily frame ~12:00 UTC; deviation checks, rate limits, bunker mode. (docs.lido.fi, Lido oracle spec.)
  • Node operator set: Curated set + Simple DVT + Community Staking Module, permissionless since Feb 2025. (blog.lido.fi, operatorportal.lido.fi.) Exact operator/validator counts: refresh.
  • Peg / exit: stETH:ETH essentially at peg (CoinGecko cross-check ~1.0002, 2026-07-01). Native withdrawals via FIFO queue since V2; queue can lengthen under stress. May-June 2022 dislocation hit ~0.93-0.95 (Terra/Celsius liquidity event, not insolvency).
  • Holder concentration (staking share): ~23% of all staked ETH as of early 2026 (Lido tokenholder update ~23%; a March 2026 low near 22.8%), down from a ~32% 2023 peak. DAO rejected self-limit 2022 (99.81% against). LDO token top-holder / unlock breakdown: refresh.
  • Recent-news scan (2026-07-01): No open protocol-level exploit. May 2025 oracle hot-wallet key compromise (Chorus One): 1.46 ETH gas stolen, no user funds. 2021 whitehat bug never exploited. April 2026 KelpDAO rsETH bridge hack ($292M, third party) hit a downstream Lido EarnETH vault holding a leveraged rsETH position ($21.6M exposure, ~9% of that vault); redemptions paused and a relief fund proposed. Lido core, stETH and wstETH explicitly unaffected. Maintained monthly. Methodology: DeFi Research Instruction v2.

← all protocols