I just found out that Lido detected an interesting issue in their wstETH bridge to ZKsync. Apparently, they found a potential vulnerability in the endpoint contract, but the good news is that there are no signs that anyone has exploited it.

As a precaution, Lido paused new deposits to the ZKsync bridge while working on a fix. But don’t worry, if you already have wstETH on ZKsync, your tokens are safe. Withdrawals and transfers are still functioning without any problems, so there’s no unnecessary panic.

The interesting part is that they already have a solution ready. The plan is to have it audited and then put to a vote in Lido’s on-chain governance. Once approved and implemented, they will reactivate deposits. Typical of Lido to proceed carefully when it comes to security.

These kinds of situations show why large protocols like Lido need to stay vigilant at all times. Detecting a vulnerability early is better than facing a thousand problems later. We’ll probably see the vote soon, and everything should return to normal in the coming weeks.