Owner

lidofinance

22 indexed repositories · View on GitHub

core
Lido DAO smart contracts

TypeScript · 497 stars
diffyscan
Diffyscan detects deployment drift by comparing GitHub source with explorer-verified source and on-chain bytecode across EVM networks.

Python · 142 stars
staking-modules
Smart contracts for the staking modules of the Lido protocol

Solidity · 115 stars
ethereum-validators-monitoring
Ethereum validators monitoring bot aimed to keep track of the validators performance

TypeScript · 101 stars
lido-oracle
Pythonic Lido Oracle daemon

Python · 80 stars
docs
Lido docs repo

JavaScript · 61 stars
lido-keys-api
Api for fetching node operators keys from modules

TypeScript · 27 stars
validator-ejector

TypeScript · 16 stars
state-mate
Validate live EVM smart contract state against expected values declared in YAML.

TypeScript · 14 stars
lido-council-daemon

TypeScript · 13 stars
onchain-mon
Lightweight on-chain monitoring infrastructure

Go · 13 stars
valos

HTML · 8 stars
scripts
Lido DAO scripts covering on-chain ops

Python · 8 stars
lido-nestjs-modules

TypeScript · 6 stars
csm-widget
CSM UI widget

TypeScript · 5 stars
safe-tx-hashes-ui

HTML · 4 stars
mev-boost-relay-allowed-list

Python · 3 stars
withdrawals-api
Withdrawals API service

TypeScript · 3 stars
multi-semantic-release
Semantic Release for monorepos

TypeScript · 1 star
late-prover-bot

TypeScript · 1 star
2 more repositories live on View on GitHub

Beginner friendly Everything

Open All

[QA/Security] Invariant Testing & Architectural Review for lidofinance/staking-modules Open

Difficulty 5/5 Over a week Newbie friendliness 30/100

lidofinance/staking-modules#892 · Opened Sep 18, 2026
Syncing consensus state can suppress exit requests past the cache cursor Open

Difficulty 3/5 1-2 days Newbie friendliness 65/100

lidofinance/validator-ejector#199 · Opened Sep 15, 2026
Suppressed initial-cycle failures can permanently skip the oldest configured exit-request blocks Open

Difficulty 3/5 1-2 days Newbie friendliness 68/100

lidofinance/validator-ejector#198 · Opened Sep 15, 2026
S3 pagination never terminates after the first truncated page Open

Difficulty 2/5 1-3 hours Newbie friendliness 85/100

lidofinance/validator-ejector#197 · Opened Sep 15, 2026
Incomplete consensus batches advance the cursor past valid exit requests Open

Difficulty 4/5 3-5 days Newbie friendliness 55/100

lidofinance/validator-ejector#196 · Opened Sep 15, 2026
Signed access lists are omitted from provenance reconstruction Open

Difficulty 3/5 1-2 days Newbie friendliness 74/100

lidofinance/validator-ejector#195 · Opened Sep 15, 2026
Stale README after EDF Open

Difficulty 2/5 1-3 hours Newbie friendliness 72/100

lidofinance/validator-ejector#194 · Opened Sep 15, 2026
Mixed-case transaction hashes are silently excluded from the allowlist Open

Difficulty 2/5 1-3 hours Newbie friendliness 82/100

lidofinance/validator-ejector#193 · Opened Sep 15, 2026
Literal logger secrets are reinterpreted as environment-variable names Open

Difficulty 3/5 1-2 days Newbie friendliness 55/100

lidofinance/validator-ejector#192 · Opened Sep 15, 2026
Governance-triggered consensus cannot satisfy submitReport-only provenance Open

Difficulty 4/5 3-5 days Newbie friendliness 56/100

lidofinance/validator-ejector#191 · Opened Sep 15, 2026
A stalled webhook error body bypasses the timeout and blocks exit processing Open

Difficulty 3/5 1-2 days Newbie friendliness 74/100

lidofinance/validator-ejector#190 · Opened Sep 15, 2026
Uppercase hexadecimal block bounds bypass the log-query range limit Open

Difficulty 2/5 1-3 hours Newbie friendliness 76/100

lidofinance/csm-widget#650 · Opened Sep 10, 2026
validate-inputs rejects Harbor project-scoped robot names (the + separator) Open

Difficulty 1/5 Under an hour Newbie friendliness 92/100

lidofinance/actions#23 · Opened Sep 9, 2026
ingress.annotations is never rendered, and service_monitor has no enabled gate Open

Difficulty 3/5 1-2 days Newbie friendliness 76/100

lidofinance/k8s-helm-charts-template#48 · Opened Sep 9, 2026
Invalid BLS signatures can permanently burn unguaranteed deposit ETH Open

vaults

Difficulty 4/5 3-5 days Newbie friendliness 45/100

lidofinance/core#1963 · 1 comment · Opened Sep 9, 2026
Support inherited AccessControl storage layouts: GHO roles mapping is at slot 6 Open

Difficulty 4/5 3-5 days Newbie friendliness 55/100

lidofinance/state-mate#192 · Opened Sep 7, 2026
Support EIP-7702 delegated accounts in ABI resolution and implementation checks Open

Difficulty 4/5 3-5 days Newbie friendliness 58/100

lidofinance/state-mate#191 · Opened Sep 7, 2026
Chain-agnostic contract-wallet proofs claim credentials from uncontrolled deployments Open

Difficulty 4/5 3-5 days Newbie friendliness 45/100

lidofinance/csm-widget#644 · Opened Sep 6, 2026
Selected operator type suppresses personal ICS applications from other role holders Open

Difficulty 3/5 1-2 days Newbie friendliness 72/100

lidofinance/csm-widget#643 · Opened Sep 6, 2026
Stale removal selections can delete a different validator key Open

Difficulty 4/5 3-5 days Newbie friendliness 55/100

lidofinance/csm-widget#638 · Opened Sep 2, 2026
Late SIWE completion can authenticate the new wallet as the previous signer Open

Difficulty 3/5 1-2 days Newbie friendliness 68/100

lidofinance/csm-widget#637 · Opened Sep 2, 2026
Unconfirmed IDVTC claims can trigger member initialization and terminal success Open

Difficulty 4/5 3-5 days Newbie friendliness 48/100

lidofinance/csm-widget#636 · Opened Sep 2, 2026
Setup deletion confirmation describes deletion of contact information Open

Difficulty 2/5 1-3 hours Newbie friendliness 82/100

lidofinance/csm-widget#635 · Opened Sep 2, 2026
Operator switching can submit stale survey answers to the newly selected operator Open

Difficulty 3/5 1-2 days Newbie friendliness 75/100

lidofinance/csm-widget#634 · Opened Sep 2, 2026
Unfiltered validator-list requests allow unauthenticated resource amplification Open

Difficulty 4/5 3-5 days Newbie friendliness 65/100

lidofinance/csm-widget#633 · Opened Sep 2, 2026
IDVTC priority-1 keys are omitted from per-key priority labeling Open

Difficulty 2/5 1-3 hours Newbie friendliness 78/100

lidofinance/csm-widget#632 · Opened Sep 2, 2026
Implicit submission unsets the claimer instead of applying the entered replacement Open

Difficulty 3/5 1-2 days Newbie friendliness 78/100

lidofinance/csm-widget#631 · Opened Sep 2, 2026
Implicit submission dispatches Cancel or Accept instead of the entered role change Open

Difficulty 3/5 1-2 days Newbie friendliness 74/100

lidofinance/csm-widget#630 · Opened Sep 2, 2026
Enabling fees after a zero-rate reconnect leaves accrual permanently suppressed Open

vaults

Difficulty 4/5 3-5 days Newbie friendliness 55/100

lidofinance/core#1952 · 1 comment · 1 reaction · Opened Aug 31, 2026
Chain-id verification fails on explorers with keyless rate limits Open

Difficulty 4/5 3-5 days Newbie friendliness 45/100

lidofinance/state-mate#183 · Opened Aug 29, 2026
operatorAndAddress cache invalidation never matches address-keyed queries Open

Difficulty 2/5 1-3 hours Newbie friendliness 74/100

lidofinance/csm-widget#624 · Opened Aug 28, 2026
The feeder can silently monitor the wrong chain Open

Difficulty 3/5 1-2 days Newbie friendliness 68/100

lidofinance/onchain-mon#144 · Opened Aug 28, 2026
Malformed RPC quantities silently reset the feeder cursor to zero Open

Difficulty 3/5 1-2 days Newbie friendliness 72/100

lidofinance/onchain-mon#143 · Opened Aug 28, 2026
NATS credentials are written verbatim to process logs Open

Difficulty 2/5 1-3 hours Newbie friendliness 78/100

lidofinance/onchain-mon#142 · Opened Aug 28, 2026
A guardian pause signature can be replayed after owner unpause Open

Difficulty 4/5 3-5 days Newbie friendliness 48/100

lidofinance/core#1947 · Opened Aug 27, 2026
mustRevert counts any throw as a revert Open

Difficulty 3/5 1-2 days Newbie friendliness 74/100

lidofinance/state-mate#173 · Opened Aug 27, 2026
First root-check failure can leave an undeletable deposit cache without a last-valid marker Open

Difficulty 2/5 1-3 hours Newbie friendliness 72/100

lidofinance/lido-council-daemon#343 · Opened Aug 21, 2026
Startup truncation skips deleted deposits from a partially retained block Open

Difficulty 3/5 1-2 days Newbie friendliness 72/100

lidofinance/lido-council-daemon#342 · Opened Aug 21, 2026
Streaming endpoints: a mid-stream error returns HTTP 200 with truncated JSON Open

Difficulty 4/5 3-5 days Newbie friendliness 45/100

lidofinance/lido-keys-api#367 · Opened Aug 8, 2026
Batch pubkey lookup silently drops mixed/upper-case keys Open

Difficulty 2/5 1-3 hours Newbie friendliness 78/100

lidofinance/lido-keys-api#364 · Opened Aug 8, 2026
Zero limit mishandled on validator-exit Open

Difficulty 2/5 1-3 hours Newbie friendliness 68/100

lidofinance/lido-keys-api#363 · Opened Aug 8, 2026
Security review — free independent assessment Open

Difficulty 5/5 Over a week Newbie friendliness 18/100

lidofinance/staking-modules#865 · Opened Jul 31, 2026
[ADD RELAY] FlashRoute - High-Speed Multi-Chain Private MEV RPC Relay (BSC, ETH, Polygon, Arbitrum) Open

Difficulty 3/5 1-2 days Newbie friendliness 35/100

lidofinance/mev-boost-relay-allowed-list#43 · Opened Jul 27, 2026
GET /v1/modules/keys: irrelevant query params bypass the response cache Open

Difficulty 4/5 3-5 days Newbie friendliness 48/100

lidofinance/lido-keys-api#355 · 1 reaction · Opened Jul 27, 2026
GET /v1/modules/keys: keys and elBlockSnapshot can come from different blocks Open

Difficulty 2/5 1-3 hours Newbie friendliness 78/100

lidofinance/lido-keys-api#354 · 1 reaction · Opened Jul 27, 2026
Ejector churn/exit-epoch prediction uses non-quantized balance for compounding validators Open

Difficulty 4/5 3-5 days Newbie friendliness 65/100

lidofinance/lido-oracle#962 · Opened Jul 15, 2026
7ab59f995e3687f8de40518450d7f53ebae977da Open

Difficulty 1/5 Under an hour Newbie friendliness 25/100

lidofinance/safe-tx-hashes-ui#10 · Opened Jul 10, 2026
Blockscout `project:/` source-path prefix breaks GitHub source lookup Open

lidofinance/diffyscan#179 · 1 reaction · 2 assignees · Opened Jun 29, 2026
refactor: move dependency manifest mutation out of analyzeCommits (HIGH #8) Open

Difficulty 4/5 3-5 days Newbie friendliness 48/100

lidofinance/multi-semantic-release#13 · Opened Jun 10, 2026
zkSync explorer fetcher likely broken: missing solcInput (KeyError downstream) + ContractName casing mismatch Open

Difficulty 4/5 3-5 days Newbie friendliness 55/100

lidofinance/diffyscan#163 · Opened Jun 2, 2026

Showing the newest 100

This page lists what was indexed most recently. Advanced filter has the whole inventory, narrowed by language, difficulty and how long a task takes.

Open advanced filter

lidofinance

Showing the newest 100

Get new issues in your inbox