Lido Pauses ZKsync Bridge After Discovering Security Flaw

Edgen Crypto

·Mar 03 2026, 13:45

Share to

Share to

Copy link

Key Takeaways

The Lido protocol has proactively paused its cross-chain bridge to ZKsync after identifying a security vulnerability. This precautionary measure highlights the persistent risks within decentralized finance infrastructure, particularly affecting bridges that connect different blockchain ecosystems.

Lido has halted new deposits to its ZKsync wstETH bridge endpoint contract due to a potential security flaw.
The action is a precautionary measure intended to protect user funds from potential exploits while a solution is developed.
A fix is scheduled for deployment in late March or early April 2026, signaling a period of reduced functionality and heightened caution for users of the bridge.

Lido Halts ZKsync Deposits Citing Endpoint Vulnerability

The Lido protocol has paused all new deposits to its wrapped staked ETH (wstETH) cross-chain bridge connecting to the ZKsync network. The team announced the suspension as a precautionary step after discovering a potential security vulnerability within the bridge's endpoint contract. This proactive measure aims to safeguard user assets while developers address the underlying issue, effectively freezing new liquidity flows from Lido into the ZKsync ecosystem through this specific channel.

Fix Planned for April 2026 Highlights Cross-Chain Risks

Lido plans to deploy a fix for the vulnerability in late March or early April 2026. While the protocol's quick action may prevent fund loss, the incident underscores the inherent security challenges present in cross-chain bridges, which are frequent targets for exploits. The temporary shutdown could reduce user confidence and impact liquidity on ZKsync. For investors, this event serves as a critical reminder of the operational and technical risks associated with depositing assets into third-party bridging protocols, even those operated by established players like Lido.