Lido: ZKsync wstETH Bridge Endpoint Contract Has a Potential Vulnerability

GateUser-6433627c · 2026-03-03T12:02:50+00:00

Lido officially announced on March 3rd that the ZKsync wstETH bridge contract has a potential vulnerability, although no exploitation has been detected. As a precaution, Lido has paused deposits into the bridge contract, but withdrawals and token transfers are unaffected. The fix will be audited and deployed in the next governance vote, with further updates to follow.

GateUser-6433627c

2026-03-03 12:02:50

Abstract generation in progress

On March 3rd, Lido officially announced that there is a potential vulnerability in the ZKsync wstETH bridge contract. Currently, there is no indication that the vulnerability has been exploited, and wstETH holders on ZKsync are unaffected. Other bridging contracts are also unaffected. As a precaution, Lido has paused deposits of new funds into the ZKsync bridge contract. Withdrawals from zkSync and token transfers are unaffected. Lido has prepared a fix, which will be audited and deployed during the next scheduled on-chain Lido governance comprehensive vote (late March / early April). After that, deposit functions will be restored. Further updates will be issued based on the situation.

ZK-2,3%

View Original

This page may contain third-party content, which is provided for information purposes only (not representations/warranties) and should not be considered as an endorsement of its views by Gate, nor as financial or professional advice. See Disclaimer for details.