INDEPENDENT CRASH TESTSTEST PROTOCOL PUBLISHED IN FULLRATINGS YOU CANNOT BUYEVERY REPORT DATED & RE-TESTEDPROTOCOLS TESTED ACROSS 12 CHAINSNEW: BRIDGE CRASH SERIES · READ NOW
← Safety Ratings
BULWARK CRASH REPORT · CR-1016

Lido

Vaults & Yield · Ethereum · Solana

Report statusValidVerificationVERIFIEDTested 1 Oct 2026 · Valid until 1 Apr 2027

Verdict Rating

2 of 5 · 68 / 100 overall

“A strong safety posture with no material failures in the reviewed scenarios.”

Rubric Breakdown

AreaScoreWeight
Depositor Protection7140%
Market Stress6625%
Exit & Liquidity5515%
Safety Assist7320%

Area scores

Depositor Protection71 / 100 · weight 40%
Market Stress66 / 100 · weight 25%
Exit & Liquidity55 / 100 · weight 15%
Sets the rating
Safety Assist73 / 100 · weight 20%

Test Evidence

Report IDCR-1016
Tested1 Oct 2026
Valid until1 Apr 2027
Fork blockEthereum - block 24055000
TVL at test$19.5M
Versionv2.1.0

Scenario Results

Open a scenario for its setup and recorded result.

Frontal DrainDegraded

Setup. Common attack classes are run against the deployment: reentrancy, rounding and precision, access control, flash loans, and donation attacks.

Recorded result. Common attack classes tested against the contracts.

Fork block
Ethereum - block 24055000
Reproduction script
Not published for this report.
Pole TestDegraded

Setup. One privileged key (admin, owner, or a single signer) is assumed leaked or misused.

Recorded result. Privileged key and upgrade path reviewed.

Fork block
Ethereum - block 24055000
Reproduction script
Not published for this report.
Side ImpactDegraded

Setup. The oracle price is pushed ±30% for one block, or through a flash loan on the source pool.

Recorded result. Oracle stress and flash-loan price impact tested.

Fork block
Ethereum - block 24055000
Reproduction script
Not published for this report.
RolloverDegraded

Setup. The main collateral or stablecoin depegs to 0.80 for six hours.

Recorded result. Collateral depeg and liquidation path reviewed.

Fork block
Ethereum - block 24055000
Reproduction script
Not published for this report.
Rear ImpactFailed

Setup. 30% of TVL is withdrawn within 24 hours by many addresses.

Recorded result. Exit queue and stressed withdrawal tested.

Fork block
Ethereum - block 24055000
Reproduction script
Not published for this report.

Findings

  • Exit & Liquidity is the limiting area at 55/100 and sets the rating.
  • 0 of five reviewed scenarios held; 5 recorded a degraded or failed result.
  • The reviewed deployment spans Ethereum, Solana and carries an overall weighted score of 68/100.
  • The report covers the tested contracts only; integrations outside that scope are not included.

Visual record

Schematic visual record · CR-1016One report.
Five scenarios.
One verdict.

Verified Resources

Limitations of Assessment

  • Scores reflect the deployment and chain set reviewed for this report.
  • On-chain metrics are measured at the test block and may move after publication.
  • The report covers the tested contracts, not integrations outside that scope.

Member Reports

Member Reports · not part of the rating0reports filed
Safety rating · set by the lab2 / 5Signed rating

Test History

ReportTestedVersionStars
CR-10161 Oct 2026v2.1.02 / 5

Protocol badge

BULWARK safety rating: Lido, 2 of 5 stars

Embed this rating on the protocol site. The badge links back to this report.

<a href="https://bulwarkproof.tech/ratings/lido/"><img src="https://bulwarkproof.tech/badge/lido.svg" alt="BULWARK safety rating: Lido, 2 of 5 stars" width="320" height="112"></a>
Signed by Test Director1 Oct 2026
MethodologyBULWARK Test Protocol v1.0
Fork blockEthereum - block 24055000

BULWARK · Tested · Unbuyable · Re-tested