Lido EarnETH
Lido EarnETH is a managed DeFi strategy vault on Ethereum built on Mellow Protocol infrastructure, accepting ETH, WETH, stETH, and wstETH deposits. Yield is generated by allocating across multiple DeFi protocols including Aave, Morpho, Uniswap, Pendle, and Gearbox. The vault is curated jointly by Mellow and Lido with a 5-of-8 multisig governance structure.
Risk Rating
This rating is based solely on publicly available information. The range from CCC- to BB+ reflects the gap between the current assessment and the potential rating achievable if all identified improvement areas are addressed.
Provider risk assessed across Business, Operations, Reliability, and Security.
View the detailed scoring breakdown
Challenge this ratingLearn about our ratingsContract Addresses
Key Strengths
- Mellow Core Vault architecture audited by multiple independent firms including competitive and traditional audits, with an EarnETH-specific audit completed within 30 days of deployment
- Governance exceeds minimum multisig thresholds with a 5-of-8 structure shared between Mellow and Lido, with a TimelockController enforcing scheduling delays
- Fully non-custodial with all contracts verified on Etherscan and deployment addresses documented in a single canonical source
- Collateral limited to highest-quality assets (ETH, WETH, stETH, wstETH) backed by Lido's diversified validator set with strong slashing protection
- Lido DAO provides substantial treasury backing with an Insurance Fund and first-loss capital backstop for Earn vaults
Key Risks
- Active loss event from leveraged rsETH/ETH position representing a significant portion of vault TVL when a KelpDAO bridge exploit impaired the asset, with a coordinated restoration plan in progress
- Vault fully paused with zero exit liquidity, far exceeding the stated withdrawal period with no resumption timeline announced
- TimelockController has a confirmed minimal delay, providing insufficient governance protection for upgrades or parameter changes
- No active bug bounty covers EarnETH or Mellow Core Vault contracts; existing programs scope only the core Lido protocol
- No automated circuit breakers triggered during the rsETH crisis; the curator had to manually pause via multisig without automatic protective actions
- Multisig signer identities are not publicly disclosed, preventing verification of signer independence; no published incident response playbook
Market Overview
Get the full picture today
Request the full rating report and gain access to unparalleled rating data & information.
Request a full report