Is stETH Safe? The Real Risks of Holding Staked ETH

stETH has held up well: it is the largest liquid staking token on Ethereum, it has been running since 2020, and its daily balance update has never gone backwards on the live network. That is not the same as safe. It is a smart contract holding other people's ETH, and the things that could go wrong are specific enough to list.

What can actually go wrong?

• The code. A bug in Lido's contracts is the big one, because it sits between you and the staked ETH. Lido's answer is external audits, formal verification and a bug bounty - good practice, not a guarantee.
• Slashing. Validators that misbehave lose ETH. Lido spreads the pool across many operators, each running under 1% of the validators on mixed client software, and keeps a fund of roughly 6,600 stETH to cover incidents.
• The oracle. Nine reporters tell the contract what the validators hold. Five would have to be compromised at once to push a false report, and a built-in sanity check rejects anything that looks extreme.
• Governance. LDO holders vote on fees and operators, while stETH holders carry the consequences. Lido's dual governance now lets stETH holders delay a contested change, or leave before it takes effect.
• The market price. stETH can trade below ETH when a lot of people want out at once.

How much of this has ever happened?

Very little. The contracts have not been drained. There has been no negative rebase on mainnet, and the mechanism that would pay withdrawals at a discount after heavy losses has never been triggered. The one real scare was the 2022 market discount, which resolved itself once withdrawals opened. That record is reassuring and it is also short - roughly five years, in a field that is younger than that.

What makes it unsafe for you specifically?

Borrowing. The common move is to deposit stETH on Aave, borrow ETH against it, buy more stETH and repeat. Each loop multiplies the staking reward and also multiplies every risk above, and it adds a new one: a few percent of market discount is enough to liquidate a tightly wound position. Most people who lose money in liquid staking lose it here, not to a hack.

Hold stETH plainly, in a wallet you control, and the risks stay the ones Lido publishes. Add leverage and you have signed up for a different product. Next: what a stETH depeg really is and how stETH works.