Back/lido
>

Lido — Trail of Bits validator-set governance review

[PUBLISHED]
trail of bits · lido
// trail of bitsprotocol: lidopublished: Mar 28, 2026source →

Trail of Bits' Q1 2026 Lido validator-set audit identified a FIFO-relaxation issue in the exit queue under load. stETH redemption timing is the primary user-visible impact; redemptions during low-activity periods are not affected.

// findings · 1
  • [MEDIUM]

    Validator exit queue ordering does not enforce strict FIFO during high-volume exit periods, allowing later submissions to exit before earlier ones.

    ValidatorExitQueueexit ordering
    Exit queue ordering relaxes during high-volume periods, breaking strict FIFO guarantees.
    ref: TOB-001
    affects:stETH-redemption
// why this might be wrong…
  • ▸This brief was generated by a multi-pass LLM editorial pipeline. Findings reflect public source material at the time of synthesis.
  • ▸Confirm against the original audit firm source before acting on any individual finding.
  • ▸Severity classification has been normalized across firms — the source firm uses its own scale.