FORESHOCK

Protocols

Request coverage

Only protocols with enough independently verified data to trust a score appear here. This is a permanent rule, not a temporary gap.

How protocols get listed: a protocol is added once it clears the same sufficiency threshold as everything else here. Which protocol gets curated next is ordered by TVL rank and by demand from coverage requests, so a request can move a protocol up the queue.

Lido

confidence low· verified weight 75% · updated 2026-07-26 · methodology 0.7.0

ChainsMulti-ChainEthereumSolanaMoonbeamMoonriverTerraLidoofficial site →

Confidence capped at low:

  • this methodology version hasn't been backtested against any historical incidents in this protocol's bucket yet
  • not because this protocol's data is thin (75% of category weight is verified data)
Why this rating
The highest-signal researched categories behind this assessment.

Dependency risk

verified

uses 2 oracles (two independent EOA-controlled committees: a 5-of-9 accounting-oracle consensus that reports consensus-layer balances/rewards, and a 4-of-6 deposit-security guardian set that authorizes deposits - neither is a price-feed oracle).

Governance attack surface

verified

top 10 holders control 37.58%, adjusted figure may still include pooled custody (untagged exchanges, infrastructure contracts) due to tagging coverage limits; exclusions require positive identification.

Audit profile

verified

35 audits on record, most recent audit is recent (<=180d); the most recent audit found 1 High and 9 Medium severity issues. This reflects code quality at the time of that audit only, not a claim that these specific issues are still unresolved today.

TVL profile

verified

TVL change (16%) is within a stable range.

Historical incidents

verified

no known own or inherited incidents.

Risk-reducing factors
Researched findings that lower this protocol's assessed risk.

Historical incidents

no known own or inherited incidents.

Bug bounty

has a bug bounty program, up to $2 000 000, hosted on immunefi.

Audit profile

35 audits on record, most recent audit is recent (<=180d); the most recent audit found 1 High and 9 Medium severity issues. This reflects code quality at the time of that audit only, not a claim that these specific issues are still unresolved today.

TVL profile

TVL change (16%) is within a stable range.

Dependencies
  • uses 2 oracles (two independent EOA-controlled committees: a 5-of-9 accounting-oracle consensus that reports consensus-layer balances/rewards, and a 4-of-6 deposit-security guardian set that authorizes deposits - neither is a price-feed oracle)
Incident history

No material incidents on record.

Audit history
  • Composable Security 2026-06-24

    Unresolved issues:

    6 low, 9 medium, 1 high, 0 critical

  • Cyfrin 2026-04-01

    Findings not confirmed in this research pass.

  • MixBytes 2026-04-01

    Findings not confirmed in this research pass.

  • Composable Security 2026-03-01

    Findings not confirmed in this research pass.

  • MixBytes 2026-03-01

    Findings not confirmed in this research pass.

  • MixBytes 2026-03-01

    Findings not confirmed in this research pass.

  • Certora 2026-03-01

    Findings not confirmed in this research pass.

  • MixBytes 2026-03-01

    Findings not confirmed in this research pass.

  • MixBytes 2026-03-01

    Findings not confirmed in this research pass.

  • Sigma Prime 2026-01-01

    Findings not confirmed in this research pass.

  • MixBytes 2026-01-01

    Findings not confirmed in this research pass.

  • MixBytes 2026-01-01

    Findings not confirmed in this research pass.

  • Ackee Blockchain 2026-01-01

    Findings not confirmed in this research pass.

  • Certora 2025-12-01

    Findings not confirmed in this research pass.

  • Certora 2025-12-01

    Findings not confirmed in this research pass.

  • Certora 2025-12-01

    Findings not confirmed in this research pass.

  • MixBytes 2025-12-01

    Findings not confirmed in this research pass.

  • MixBytes 2025-12-01

    Findings not confirmed in this research pass.

  • ConsenSys Diligence 2025-12-01

    Findings not confirmed in this research pass.

  • Ackee Blockchain 2025-12-01

    Findings not confirmed in this research pass.

  • MixBytes 2025-12-01

    Findings not confirmed in this research pass.

  • Composable Security 2025-12-01

    Findings not confirmed in this research pass.

  • MixBytes 2025-09-01

    Findings not confirmed in this research pass.

  • MixBytes 2025-09-01

    Findings not confirmed in this research pass.

  • Ackee Blockchain 2025-09-01

    Findings not confirmed in this research pass.

  • Composable Security 2025-09-01

    Findings not confirmed in this research pass.

  • MixBytes 2025-09-01

    Findings not confirmed in this research pass.

  • Ackee Blockchain 2025-09-01

    Findings not confirmed in this research pass.

  • Statemind 2025-09-01

    Findings not confirmed in this research pass.

  • Certora 2025-08-01

    Findings not confirmed in this research pass.

  • Statemind 2025-08-01

    Findings not confirmed in this research pass.

  • Composable Security 2025-08-01

    Findings not confirmed in this research pass.

  • Code4rena 2025-08-01

    Findings not confirmed in this research pass.

  • MixBytes 2025-07-01

    Findings not confirmed in this research pass.

  • Nethermind 2025-07-01

    Findings not confirmed in this research pass.

This assessment follows Foreshock's published methodology. Exact category weights, scoring rules, thresholds, and aggregation logic are proprietary and not shown here. How to interpret this assessment

Do you hold a position in this protocol?

Get an email when this assessment materially changes.

Monitor this protocol
Lido · Foreshock