TechFlow reports that on March 3, Lido disclosed a potential security vulnerability related to the ZKsync wstETH bridge endpoint contract. There is currently no evidence that this vulnerability has been exploited; wstETH holders on ZKsync remain unaffected, and other bridges are also unaffected.
As a precautionary security measure, Lido has paused new deposits to the ZKsync bridge. Withdrawals from ZKsync and token transfers remain fully operational.
Lido has prepared a fix and will conduct an audit and deployment following its next scheduled on-chain governance omnibus vote (expected at the end of March or early April), after which deposit functionality will be restored. Lido stated it will share further updates at the appropriate time.
Add to Favorites
Share to Social Media
