Lido V3 introduces Staking Vaults (stVaults) as a modular extension to Lido's liquid staking protocol. This upgrade enables users to stake ETH with specific node operators while still minting stETH, preserving liquidity through an overcollateralization model. This maintains stETH fungibility and security while allowing customizable staking setups.

The primary goal of this security audit is to comprehensively assess the security posture of the Lido V3 on-chain smart contracts, with particular emphasis on the stVaults feature because it introduces new attack surfaces related to vault collateralization, cross-vault interactions, and the coordination between VaultHub, StakingVault contracts, and the broader core Lido protocol. The audit aims to identify potential vulnerabilities, attack vectors, and security weaknesses that could compromise the integrity, availability, and financial security of the stVaults ecosystem.

During this manual audit, the Certora team reported 84 findings including 7 of critical severity and 14 of high severity, all of which were fixed by the Lido team.