Lido: Potential Vulnerability in ZKsync wstETH Bridge Endpoint Contract, Deposits Paused
2026-03-03 12:04
Odaily News Lido posted on platform X, stating that a potential vulnerability has been identified in the ZKsync wstETH bridge endpoint contract. There are currently no signs that this vulnerability has been exploited. wstETH holders on ZKsync are unaffected, and other bridge contracts are also unaffected. Out of an abundance of caution, new deposits to the ZKsync bridge have been paused. Withdrawals and token transfers on ZKsync are not affected. A fix has been completed and will be audited and deployed via the next scheduled on-chain Lido governance omnibus vote (late March to early April), after which deposits will be resumed. Further updates will be provided.
