Dubersnack/audits

Lido Protocol Audits

12-2020 Sigma Prime Security Assessment

The testing team identified a total of eighteen (18) issues during this assessment, of which:

• Five (5) are classified as medium risk (4 resolved, 1 closed),
• Eight (8) are classified as low risk (4 resolved, 3 closed, 1 open),
• Five (5) are classified as informational (2 resolved, 3 closed).

See full report for more details.

12-2020 Quantstamp Audit

• Total Issues: 14 (7 Resolved)
• High Risk Issues: 0 (0 Resolved)
• Medium Risk Issues: 1 (0 Resolved)
• Low Risk Issues: 4 (3 Resolved)
• Informational Risk Issues: 2 (2 Resolved)
• Undetermined Risk Issues: 7 (2 Resolved)

See full report for more details.

04-2021 MixBytes Audit: ETH2 Oracle

• Total Issues: 7 (1 Fixed, 6 No issue)
• Critical Issues: 0
• Major Issues: 0
• Warning Issues: 4 (4 No issue)
• Comment Risk Issues: 3 (1 Fixed, 2 No issue)

See full report for more details.

05-2021 MixBytes Audit: stETH price oracle

• Total Issues: 7 (4 Fixed, 1 No issue, 2 Acknowledged)
• Critical Issues: 0
• Major Issues: 0
• Warning Issues: 2 (1 Fixed, 1 Acknowledged)
• Comment Risk Issues: 5 (3 Fixed, 1 No issue, 1 Acknowledged)

See full report for more details.

05-2021 MixBytes Audit: Withdrawals Manager Proxy and Stub

• Total Issues: 1 (1 Fixed)
• Critical Issues: 0
• Major Issues: 0
• Warning Issues: 0
• Comment Risk Issues: 1 (1 Fixed)

See full report for more details.

06-2021 MixBytes stETH Price Feed Security Audit

• Total Issues: 10 (3 Fixed, 6 No issue, 1 Acknowledged)
• Critical Issues: 0
• Major Issues: 0
• Warning Issues: 4 (1 Fixed, 2 No issue, 1 Acknowledged)
• Comment Risk Issues: 6 (2 Fixed, 4 No issue)

See full report for more details.

07-2021 MixBytes bETH Vault Security Audit

• Total Issues: 5 (3 Fixed, 2 Acknowledged)
• Critical Issues: 0
• Major Issues: 0
• Warning Issues: 1 (1 Acknowledged)
• Comment Risk Issues: 4 (3 Fixed, 1 Acknowledged)

See full report for more details.

08-2021 MixBytes bETH Vault Security Audit

bETH Vault was re-audited by MixBytes to incorporate the changes made since the previous audit.

• Total Issues: 0
• Critical Issues: 0
• Major Issues: 0
• Warning Issues: 0
• Comment Risk Issues: 0

See full report for more details.

09-2021 MixBytes wstETH Security Audit

• Total Issues: 5 (3 Acknowledged, 2 No Issue)
• Critical Issues: 0
• Major Issues: 0
• Warning Issues: 5 (3 Acknowledged, 2 No Issue)
• Comment Risk Issues: 0

See full report for more details.

09-2021 MixBytes Easy Track Security Audit

• Total Issues: 3 (2 Fixed, 1 No Issue)
• Critical Issues: 0
• Major Issues: 0
• Warning Issues: 2 (2 Fixed)
• Comment Risk Issues: 1 (1 No Issue)

See full report for more details.

09-2021 MixBytes 1inch Rewards Manager Security Audit

• Total Issues: 4 (4 Acknowledged)
• Critical Issues: 0
• Major Issues: 0
• Warning Issues: 2 (2 Acknowledged)
• Comment Risk Issues: 2 (2 Acknowledged)

See full report for more details.

10-2021 MixBytes Aragon Voting Security Audit

The version of the Aragon Voting smart contract with support of the voting time change.

• Total Issues: 9 (9 Acknowledged)
• Critical Issues: 0 (0 Fixed)
• Major Issues: 1 (1 Acknowledged)
• Warning Issues: 4 (4 Acknowledged)
• Comment Risk Issues: 4 (4 Acknowledged)

See full report for more details.

10-2021 Sigma Prime Easy Track Smart Contract Security Review

The testing team identified a total of nine (9) issues during this assessment, of which:

• One (1) is classified as high risk (1 resolved),
• Three (3) are classified as low risk (3 resolved),
• Five (5) are classified as informational (3 resolved, 2 closed).

See full report for more details.

01-2022 MixBytes bETH Vault Security Audit Report

bETH Vault was re-audited by MixBytes to incorporate the changes made for the vault to work with Wormhole bridge instead of the Shuttle bridge.

• Total Issues: 5 (3 Fixed, 2 Acknowledged)
• Critical Issues: 0
• Major Issues: 1 (1 Acknowledged)
• Warning Issues: 4 (4 Acknowledged)
• Comment Risk Issues: 2 (2 Acknowledged)

See full report for more details.

02-2022 MixBytes AAVE stETH integration Security Audit Report

• Total Issues: 11 (3 Fixed, 2 Acknowledged)
• Critical Issues: 0
• Major Issues: 1 (1 Fixed)
• Warning Issues: 5 (2 Acknowledged, 3 Fixed)
• Comment Risk Issues: 5 (1 Acknowledged, 4 Fixed)

See full report for more details.

02-2022 MixBytes In-protocol Coverage Security Audit Report

• Total Issues: 3 (3 Fixed)
• Critical Issues: 1 (1 Fixed)
• Major Issues: 0
• Warning Issues: 1 (1 Fixed)
• Comment Risk Issues: 1 (1 Fixed)

See full report for more details.

02-2022 MixBytes Deposit Security Module Security Audit Report

• Total Issues: 22 (17 Fixed, 5 Acknowledged)
• Critical Issues: 0
• Major Issues: 2 (2 Fixed)
• Warning Issues: 13 (5 Acknowledged, 8 Fixed)
• Comment Risk Issues: 7 (7 Fixed)

See full report for more details.

04-2022 Lido On Polygon Smart Contracts Security Audit Report for PR#69

• Total Issues: 9 (4 Fixed, 1 Acknowledged, 1 No Issue)
• Critical Issues: 0
• Major Issues: 0
• Warning Issues: 0
• Info Issues: 9 (4 Fixed, 1 Acknowledged, 1 No Issue)

See full report for more details.

05-2022 Oxorio Jumpgate Smart Contracts Security Audit Report

• Total Issues: 12 (11 Fixed, 1 Acknowledged)
• Critical Issues: 0
• Major Issues: 1 (1 Fixed)
• Warning Issues: 2 (2 Fixed)
• Comment Risk Issues: 9 (8 Fixed, 1 Acknowledged)

See full report for more details.

05-2022 MixBytes Lido Protocol Security Audit Report

• Total Issues: 15 (13 Fixed, 2 Acknowledged)
• Critical Issues: 0
• High Issues: 1 (1 Fixed)
• Medium Issues: 7 (6 Fixed, 1 Acknowledged)
• Low Issues: 7 (6 Fixed, 1 Acknowledged)

See full report for more details.

06-2022 MixBytes Lido Two-Phase Voting Security Audit Report

• Total Issues: 10 (7 Fixed, 3 Acknowledged)
• Critical Issues: 0
• High Issues: 0
• Medium Issues: 1 (1 Acknowledged)
• Low Issues: 9 (7 Fixed, 2 Acknowledged)

See full report for more details.

07-2022 Oxorio Lido L2 Smart Contracts Security Audit Report

• Total Issues: 9 (6 Fixed, 2 Acknowledged, 1 No Issue)
• Critical Issues: 1 (1 Acknowledged)
• Major Issues: 1 (1 Fixed)
• Warning Issues: 1 (1 Fixed)
• Info Issues: 6 (4 Fixed, 1 Acknowledged, 1 No Issue)

See full report for more details.

08-2022 ChainSecurity Code Assessment of the Lido Smart Contracts Audit Report

• Total Issues: 9 (4 Risk accepted, 5 Acknowledged)
• Critical Issues: 0
• High Issues: 0
• Medium Issues: 0
• Low Issues: 9 (4 Risk accepted, 5 Acknowledged)
• Notes: 2 (Highlights)

See full report for more details.

08-2022 MixBytes Lido Protocol Security Auditor's Note On The Deployed Code Compliance

See note contents for more details

08-2022 Oxorio Governance Crosschain Bridges Smart Contracts Security Audit Report

• Total Issues: 8 (8 Acknowledged)
• Critical Issues: 0
• Major Issues: 0
• Warning Issues: 2 (2 Acknowledged)
• Info Issues: 6 (6 Acknowledged)

See full report for more details.

08-2022 Oxorio Lido on Polygon V2

• Total Issues: 107 (61 Fixed, 11 Acknowledged, 35 No Issue)
• Critical Issues: 0
• Major Issues: 0
• Warning Issues: 14 (12 Fixed, 2 No Issue)
• Info Issues: 93 (49 Fixed, 11 Acknowledged, 33 No Issue)

See full report for more details.

09-2022 Statemind MEV-Boost relay allowlist Security Audit Report

• Total Issues: 7 (5 Fixed, 2 Acknowledged)
• Critical Issues: 0
• High Issues: 0
• Medium Issues: 0
• Informational Issues: 7 (5 Fixed, 2 Acknowledged)

See full report for more details.

09-2022 Statemind Insurance Fund Audit Report

• Total Issues: 4 (1 Fixed, 3 Acknowledged)
• Critical Issues: 0
• High Issues: 0
• Medium Issues: 0
• Informational Issues: 4 (1 Fixed, 3 Acknowledged)

See full report for more details.

09-2022 Statemind Easy Track Payment Processor with limits

• Total Issues: 9 (9 Acknowledged)
• Critical Issues: 0
• High Issues: 1 (1 Acknowledged)
• Medium Issues: 0
• Informational Issues: 8 (8 Acknowledged)

See full report for more details.

01-2023 Statemind TRP Vesting Escrow Audit Report

• Total Issues: 5 (4 Fixed, 1 Acknowledged)
• Critical Issues: 0
• High Issues: 0
• Medium Issues: 0
• Informational Issues: (4 Fixed, 1 Acknowledged)

See full report for more details.

02-2023 ChainSecurity Lido Staking Router Audit Report

• Total Issues: 13 (10 Fixed, 3 Acknowledged)
• Critical Issues: 0
• High Issues: 1 (1 Fixed)
• Medium Issues: 2 (2 Fixed)
• Informational Issues: 10 (7 Fixed, 3 Acknowledged)

See full report for more details.

03-2023 Sigma Prime dc4bc Security Audit

• Total Issues: 8 (8 Fixed)
• Critical Issues: 0
• High Issues: 0
• Medium Issues: 3 (3 Fixed)
• Low Issues: 2 (2 Fixed)
• Informational Issues: 3 (3 Fixed)

See full report for more details. The report had been updated on 14 March 2023 with the build hashes of 4.1.0 release.

04-2023 Hexens Lido V2 Smart Contract Audit

• Total Issues: 25 (16 Fixed, 9 Acknowledged)
• Critical Issues: 1 (1 Fixed)
• High Issues: 3 (3 Fixed)
• Medium Issues: 5 (4 Fixed, 1 Acknowledged)
• Low Issues: 11 (6 Fixed, 5 Acknowledged)
• Informational Issues: 5 (2 Fixed, 3 Acknowledged)

See full report for more details.

04-2023 MixBytes Camp Lido V2 Contest

• Total Issues: 17 (8 Fixed, 9 Acknowledged)
• Critical Issues: 0
• High Issues: 1 (1 Acknowledged)
• Medium Issues: 3 (1 Fixed, 2 Acknowledged)
• Low Issues: 13 (7 Fixed, 6 Acknowledged)

See full report for more details.

04-2023 Statemind GateSeals Audit

• Total Issues: 4 (3 Fixed, 1 Acknowledged)
• Critical Issues: 0
• High Issues: 1 (1 Fixed)
• Medium Issues: 0
• Low Issues: 0
• Informational Issues: 3 (2 Fixed, 1 Acknowledged)

See full report for more details.

04-2023 Certora Lido V2 Audit

• Total Issues: 23 (14 Fixed, 9 Acknowledged)
• Critical Issues: 2 (2 Fixed)
• High Issues: 5 (1 Fixed, 4 Acknowledged)
• Medium Issues: 10 (7 Fixed, 3 Acknowledged)
• Low Issues: 5 (3 Fixed, 2 Acknowledged)
• Informational Issues: 1 (1 Fixed)

See full report for more details.

04-2023 Statemind Lido V2 Audit

• Total Issues: 120 (75 Fixed, 45 Acknowledged)
• Critical Issues: 2 (1 Fixed, 1 Acknowledged)
• High Issues: 8 (6 Fixed, 2 Acknowledged)
• Medium Issues: 17 (9 Fixed, 8 Acknowledged)
• Informational Issues: 93 (59 Fixed, 34 Acknowledged)

See full report for more details.

05-2023 Statemind Lido V2 Upgrade Template Audit

• Total Issues: 14 (7 Fixed, 7 Acknowledged)
• Critical Issues: 0
• High Issues: 0
• Medium Issues: 0
• Informational Issues: 14 (7 Fixed, 7 Acknowledged)

See full report for more details.

05-2023 Statemind Lido V2 Deployment Validation Note

See note contents for more details.

05-2023 Hexens Lido V2 Oracle Security Review

• Total Issues: 2 (2 Fixed)
• Critical Issues: 0
• High Issues: 0
• Medium Issues: 0
• Low Issues: 1 (1 Fixed)
• Informational Issues: 1 (1 Fixed)

See full report for more details.

05-2023 Oxorio Lido V2 On-chain Audit

• Total Issues: 43 (4 Fixed, 37 Acknowledged, 2 No Issue)
• Critical: 0
• Major: 7 (7 Acknowledged)
• Warning: 17 (16 Acknowledged, 1 No Issue)
• Info: 19 (4 Fixed, 14 Acknowledged, 1 No Issue)

See full report for more details.

05-2023 Oxorio Lido V2 Off-chain Audit

• Total Issues: 11 (1 Fixed, 10 Acknowledged)
• Critical: 0
• Major: 5 (5 Acknowledged)
• Warning: 2 (1 Fixed, 1 Acknowledged)
• Info: 4 (4 Acknowledged)

See full report for more details.

10-2023 Oxorio Lido Easy Track Smart Contracts Security Audit (Easy Track Factories for Stablecoins)

• Total Issues: 9 (5 Fixed, 4 Acknowledged)
• Critical: 0
• Major: 0
• Warning: 2 (1 Fixed, 1 Acknowledged)
• Info: 7 (4 Fixed, 3 Acknowledged)

See full report for more details.

12-2023 Pessimistic Lido Stonks Audit

• Total Issues: 8 (4 Fixed, 4 Acknowledged)
• Critical: 0
• Medium: 2 (1 Fixed, 1 Acknowledged)
• Low: 3 (3 Fixed)
• Notes: 3 (3 Acknowledged)

See full report for more details.