Lido

https://lido.fi · Published 19 Aug 2026 · updated 19 Aug 2026

ChainSift Score / 100

RISK: MEDIUM

Lido is a major Ethereum liquid staking protocol launched in 2020, offering stETH as a liquid staking derivative with approximately $18.4 billion TVL. The project operates as a DAO (Lido DAO) governed by LDO token holders, with over 600 node operators and extensive DeFi ecosystem integrations. The main page confirms substantial security investment and public governance infrastructure, though direct sub-pages for team, tokenomics, and legal documentation all returned 404, limiting independent verification of several sub-signals.

This report is published free of charge and stays published. It was produced because somebody paid for the investigation to happen — we never disclose who requested a report, and paying for one does not influence what it says.

What we could not check. These are gaps in our collection, not findings about the project. The affected sub-signals were excluded from the score and from the maximum — the project is not penalised for them.

All sub-pages beyond the homepage (team, docs, tokenomics, audit, legal, privacy, terms) returned 404 at the assessed URLs. The homepage footer references 'Audits', 'Privacy Notice', and 'Terms Of Use' as navigation items, suggesting these pages may exist at non-standard paths not included in the retrieval log; they were not retrieved and therefore not assessed.
The LDO token vesting and unlock schedule could not be assessed from any retrieved page. External sources (Lido documentation on docs.lido.fi, Dune dashboards) may contain this information but were not in scope for this retrieval.
The specific audit reports referenced on the homepage could not be retrieved because lido.fi/audits returned 404 and the actual audit links (likely on a docs subdomain) were not fetched.
The 'Privacy Notice' and 'Terms Of Use' linked in the homepage footer could not be retrieved as their target URLs were not included in the retrieval log and standard path guesses returned 404.

On-chain contract data

LDO · Ethereum · 0x5a98fcbea516cf06857215779fd812ca3bef1b32

Transfers can be paused by the owner
Owner can change balances directly
Top-10 holders control 49.8% of supply
Contract source is verified on the explorer
Liquidity is NOT locked

These facts are read from the contract and override anything the project's own material claims. See the live on-chain check →

Scores by category

Team & Transparency 10/20

identities verifiable 4 · track record 4 · public presence 2

https://lido.fi/team and https://lido.fi/about both returned 404; no team page is present on the main domain assessed.
Lido is a well-established protocol operating since 2020 with a publicly traceable DAO governance history, on-chain votes, and a documented research forum — this provides a checkable organizational track record independent of the website.
Key contributors are identifiable through public DAO governance records (Snapshot, Aragon), GitHub repositories, and community forums such as the Lido research forum linked on the homepage, though the website itself does not list named individuals.
The DAO structure means decision-making is pseudonymous by design; core contributors are publicly active on governance forums and Discord but no named individuals are surfaced on lido.fi itself.
Public_presence scored conservatively because the main website retrieved provides no direct links to named contributor profiles, only community channels (X, Telegram, Discord, Research Forum).

Tokenomics 11/20

supply documented 2 · holder concentration 4 · unlocks disclosed 2 · token function 3

https://lido.fi/tokenomics and https://lido.fi/token both returned 404; no tokenomics documentation was accessible on the project's main domain during this assessment.
On-chain verified facts show LDO has 63,542 holders with top-10 holders controlling 49.8% of supply — a significant concentration level that presents governance and market risk even for an established protocol.
The LDO contract is confirmed non-mintable on-chain, which is a positive supply control factor, but total supply figures and emission schedules were not retrievable from the website.
Token function is partially documented on the homepage: LDO is described as the governance token for Lido DAO, enabling on-chain votes and off-chain Snapshot signaling, providing a stated use beyond speculation.
Vesting and unlock schedules for team/early investor allocations were not accessible from any retrieved page; lido.fi/docs returned 404. Lido's unlock history is publicly documented externally (e.g., on Dune dashboards referenced on the site), but this could not be assessed from the website itself.

Technology 16/20

source verified 4 · audit published 4 · repo activity 5 · stage matches claims 3

Contract source is verified on-chain (confirmed in retrieval facts): the LDO token contract at 0x5a98fcbea516cf06857215779fd812ca3bef1b32 is source-verified.
The homepage explicitly links to an 'Audits' section and references 'over $4M invested in security, including audits, bug bounties, and expert reviews,' and mentions a 'Web3SOC Certified Grade A' certification. The audits page (lido.fi/audits) returned 404, so the specific audit reports could not be retrieved from the site; however, the homepage footer contains an 'Audits' link suggesting they exist elsewhere in the site structure.
GitHub is explicitly linked from the homepage ('Open sourced — Allowing continuous peer reviews and enhancements from developers worldwide'), and Lido's GitHub organization (github.com/lidofinance) is a publicly known, independently checkable repository with extensive commit history — consistent with a protocol operating since 2020.
A Bug Bounty program is referenced on the homepage, consistent with a mature security posture.
Product stage claims ($18.4B TVL, 9.5M ETH staked, rewards paid since 2020) are independently verifiable on-chain and through third-party analytics such as DefiLlama and the Dune dashboards referenced on the site, supporting stage-matches-claims. However, new products (EarnETH, EarnUSD, stVaults/V3) are presented at early TVL levels ($170M and $39.5M respectively) with forward-looking feature descriptions, introducing some gap between claims and verifiable delivery.

Red Flags 14/20

contract mechanics 5 · copied content 4 · impossible claims 3 · manufactured activity 2

On-chain facts confirm: no honeypot, no buy/sell tax, not mintable, not upgradeable proxy, no blacklist. These are strong positives for the LDO token contract specifically.
The LDO contract is confirmed Pausable on-chain. The pause mechanism is a non-trivial risk: under certain conditions the ability to pause transfers exists, though in a DAO-governed protocol this is typically controlled by governance rather than a single key. This warrants monitoring of who holds pause authority.
Liquidity locked at 0% is flagged by on-chain data. For an established protocol with DAO governance this is less alarming than for a new project (DAO treasury management replaces lock mechanisms), but it is an observable fact.
The homepage includes a clear disclaimer on APR/APY: 'APR/APY figures are estimates, not guaranteed, and are subject to change... Past performance does not guarantee future results.' This is appropriate risk disclosure and avoids impossible claims.
The Sharplink '$200 Million ETH Staking Allocation' headline claim on the homepage is a specific, named partnership that should be independently verifiable; no evidence of fabrication was found within retrieved content, but it could not be fully verified from retrieved pages alone.
No evidence of copied content or manufactured activity was detectable from the retrieved homepage content. The site references independently verifiable metrics (Rated.network, Dune dashboards) rather than self-reported unverifiable figures.

Legal 7/20

entity disclosed 2 · jurisdiction 1 · terms and privacy 3 · regulatory posture 1

https://lido.fi/terms, https://lido.fi/terms-of-service, https://lido.fi/terms-and-conditions, https://lido.fi/legal, https://lido.fi/privacy, and https://lido.fi/privacy-policy all returned 404. No legal sub-pages exist at these standard paths.
The homepage footer references 'Privacy Notice' and 'Terms Of Use' as text links, suggesting these documents may exist elsewhere on the site but were not accessible via standard URL patterns during this assessment. Scored conservatively as partially present.
No operating legal entity name is disclosed on the retrieved homepage. Lido DAO is referenced as the governing body, but a DAO is not in itself a registered legal entity in most jurisdictions; no foundation, LLC, or other entity is named.
No jurisdiction is identified on the retrieved homepage content.
The homepage references 'Web3SOC Certified Grade A — Assessed and Certified for Institutions in operational, financial, security and regulatory areas,' suggesting some regulatory engagement, but no specific regulatory framework, license, or compliance status is disclosed.
Regulatory posture for a protocol offering yield-bearing products (EarnETH at 2.9% APY, EarnUSD at 6.9% APY) without disclosed regulatory status presents unquantified risk depending on the user's jurisdiction.

Key risks

Top-10 LDO holders control 49.8% of supply, creating governance concentration risk; a coordinated vote by a small number of large holders could pass proposals that affect the entire protocol.
The LDO token contract is pausable on-chain; while pause authority is presumably governed by the DAO, the specific multi-sig or governance key holding this ability was not verifiable from retrieved content.
No legal entity is disclosed on the assessed website, creating uncertainty about contractual counterparty, regulatory accountability, and user recourse in the event of disputes.
Yield-bearing products (EarnETH 2.9% APY, EarnUSD 6.9% APY) carry unquantified regulatory risk in multiple jurisdictions; no regulatory status or license is disclosed.
Liquidity locked at 0% for LDO: DAO treasury management substitutes for traditional locks, but this relies entirely on continued DAO governance functioning as intended.
New product lines (stVaults/V3, EarnETH, EarnUSD) are presented alongside the established stETH product with limited differentiation in risk disclosure; smart contract risk for newer modules has not been independently verified from retrieved content.

Questions to ask before investing

What legal entity (foundation, association, LLC, or other) holds contractual relationships with node operators, auditors, and institutional partners, and in what jurisdiction is it registered?
Who holds the pause authority on the LDO token contract (0x5a98fcbea516cf06857215779fd812ca3bef1b32), and under what governance conditions can a pause be triggered?
What is the complete LDO token vesting and unlock schedule for team, investors, and DAO treasury, and what portion of the top-10 holder concentration (49.8%) is attributable to the DAO treasury versus third-party holders?
Where are the full audit reports for the Lido protocol (not just the LDO token contract) published, and which auditors conducted the most recent reviews of stVaults and EarnETH/EarnUSD contracts?
What regulatory analysis has been conducted for EarnETH and EarnUSD yield products with respect to securities law in the US, EU, and other major jurisdictions, and are these products available to users in those jurisdictions?

Scored by the published ChainSift methodology: five categories of 20 points each. Sub-signal scores are summed by code, not chosen by a language model. This is risk assessment, not investment advice, and it describes what was observable on the date shown. Projects change.