Lido: ZKsync wstETH Bridge Endpoint Contract Has Potential Vulnerability

ZkProver · 2026-03-03T12:16:00+00:00

Lido official report states that the ZKsync wstETH bridge contract has a potential vulnerability, but it has not been exploited, and wstETH holders are unaffected. Out of caution, Lido has paused new fund deposits, and other transfers are unaffected. The fix will be audited and deployed in late March/early April, and deposit functionality will be restored.

ZkProver

2026-03-03 12:16:00

Abstract generation in progress

ChainCatcher message: Lido official states that there is a potential vulnerability in the ZKsync wstETH bridge contract. Currently, there is no indication that the vulnerability has been exploited, and wstETH holders on ZKsync are unaffected. Other bridging contracts are not affected.

As a precaution, Lido has paused depositing new funds into the ZKsync bridge contract. Withdrawals from zkSync and token transfers are unaffected. Lido has prepared a fix, which will be audited and deployed during the next scheduled on-chain Lido governance comprehensive vote (late March / early April). Depositing will resume afterward. Further updates will be provided as appropriate.

View Original

This page may contain third-party content, which is provided for information purposes only (not representations/warranties) and should not be considered as an endorsement of its views by Gate, nor as financial or professional advice. See Disclaimer for details.