Lido: The ZKsync wstETH bridge endpoint contract has a potential vulnerability

Lido officially stated that there is a potential vulnerability in the ZKsync wstETH bridging endpoint contract. There are currently no signs that this vulnerability has been exploited, and wstETH holders on ZKsync are not affected. Other bridging contracts are not impacted.

As a precaution, Lido has paused new deposits to the ZKsync bridging contract, while withdrawals from zkSync and token transfers are unaffected. Lido has prepared a fix that will be audited and deployed during the next scheduled on-chain Lido governance comprehensive vote (late March/early April), after which the deposit functionality will be restored. Further updates will be released as necessary.

This content is provided for general informational purposes only and doesn't constitute financial, investment, legal, or tax advice. Any events, rewards, online promotions, or related information mentioned herein should not be considered a recommendation, solicitation, or invitation to purchase, sell, trade, or otherwise deal in any crypto assets. Crypto assets are highly volatile and may result in loss. The availability of WEEX services, products, and related events may vary by region. You are responsible for ensuring that your participation is in accordance with applicable local laws and regulations.