defirisk.co
rubric v1.7.0

Reentrancy guard on external-calling functions

Lido's assessment for RD-F-014 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

Lido.sol documents CEI pattern ('firstly update the local state to prevent reentrancy') but lacks explicit nonReentrant modifier (Aragon-era contracts predate common OZ ReentrancyGuard). No reentrancy finding at high severity in any accessible audit summary for core contracts. Cannot verify V3 reentrancy posture without tool run.

Sources #

  • URL
    retrieved 2026-04-28
  • URL
    Lido.solhttps://github.com/lidofinance/core/blob/master/contracts/0.4.24/Lido.solretrieved 2026-04-28

Methodology #

Determine whether all state-mutating functions that perform external calls carry `nonReentrant` or an equivalent reentrancy guard.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol lido factor RD-F-014 score yellow collected_at 2026-04-28 13:58:42