{"id":938,"date":"2024-10-17T16:56:28","date_gmt":"2024-10-17T14:56:28","guid":{"rendered":"https:\/\/ackee.xyz\/blog\/?p=938"},"modified":"2025-02-03T11:42:05","modified_gmt":"2025-02-03T09:42:05","slug":"lido-csm-audit-summary","status":"publish","type":"post","link":"https:\/\/ackee.xyz\/blog\/lido-csm-audit-summary\/","title":{"rendered":"Lido CSM Audit Summary"},"content":{"rendered":"

Lido Community Staking Module (CSM) is a permissionless module allowing community stakers to operate Ethereum validators with lower entry costs. Stakers provide stETH bonds, serving as security collateral, and receive rewards in the form of bond rebase and staking rewards (including execution layer rewards), which are socialized across Lido’s staking modules. Lido Staking Router (SR) V2 is a component that utilizes a modular design with support for staking modules like CSM.<\/span><\/p>\n

Ackee Blockchain Security assigned two specialized teams to audit the Lido CSM update, with one focusing on the Community Staking Module (CSM) and the other on the Staking Router (SR). The Lido CSM update itself is divided into two parts: new contracts for the CSM codebase in a separate repository and changes to existing core contracts, such as the SR. To ensure a thorough and efficient review, the respective teams audited these two parts in parallel, each addressing the security aspects of both CSM and SR.<\/span><\/p>\n

Across both reports, Ackee Blockchain Security discovered 46 issues which resulted in 32 fixes by Lido Finance.<\/span><\/p>\n

Lido Finance engaged Ackee Blockchain Security to perform a security review of the Lido Finance Community Staking Module for a total of 74 engineering days in a period between July 16 and September 6, 2024.\u00a0<\/span><\/p>\n

Lido Finance also engaged Ackee Blockchain Security to perform a security review of the Lido Finance Staking Router for a total of 26 engineering days in a period between July 22 and August 23, 2024.<\/span><\/p>\n

Both time donations included Fuzzing with <\/span>Wake Framework<\/span><\/a>. The audit resulted in 7831 lines of fuzz tests, 58 execution flows, and 36 stateful invariants. All tests have been pushed public to the <\/span>awesome-wake-tests<\/span><\/a> repo. The audit of CSM and SR contained 5256 and 3434 lines of code, respectively.
\n<\/span><\/p>\n

METHODOLOGY<\/span><\/h2>\n

The CSM methodology includes the review, implementation and execution of manually-guided differential stateful fuzz tests<\/a> in Wake testing framework to verify the correctness of the system. Ackee performed a thorough manual review of the code, focusing on the following aspects:<\/span><\/p>\n