Lido’s lending plan could block loan repayments without stopping interest

Lido, the largest liquid staking provider, has proposed a lending protocol called Lido Lend. The system is built on a modified version of the open-source protocol Morpho Blue. A key feature of the design is a controller contract that can separate a limited market freeze from a broader pause. The broader pause would shut down repayment, liquidation, and lender settlement together.

The November 9 consolidated proposal outlines these emergency rules. Borrowers would be blocked from paying down debt and lenders from withdrawing their funds. The distinction is critical: when the pause ends, the next successful interest update would count the time the market was locked. This means a borrower could regain repayment access with a larger debt balance.

The proposed architecture deploys the core contracts on Ethereum mainnet. However, the decentralized autonomous organization (DAO) must accept the protocol separately. Each market would then need its own motion or DAO vote to launch. As of November 14, the forum discussion continued with a signer declaration, but no completed acceptance vote or creation of the first market had been announced.

Emergency powers and pause mechanics

The protocol includes a Guardian ban that stops an account’s new borrowing and collateral maturation. This restriction does not itself stop repayment, liquidation, settlement, or collateral withdrawal. The expected first market would launch with one contributor-run Guardian and a 1-of-1 quorum, with independent Guardians intended later.

A more severe freeze stops new borrowing, new collateral from completing its activation delay, and collateral withdrawals from positions carrying debt. Repayment, liquidation, lender withdrawals, and settlement remain available under the remaining rules. The Risk Steward Committee could impose that freeze and tighten defined controller settings through its dashboard, but could not loosen them.

The proposed Operational Committee would use bounded Easy Track motions, open to LDO-holder objections, for actions such as unfreezing. The Emergency Brakes Committee has a 3-of-6 signing threshold. Through CircuitBreaker, it could trigger one fixed-duration controller pause per registration while maintaining required liveness signals, called heartbeats. It could not select the duration, extend the pause, or end it early.

The repository’s mainnet profile selects a configuration with an initial pause of five minutes and a permitted range from one minute to 60 days. The first market’s actual setting has not been confirmed. Automatic expiry also has an exception. The protocol-wide Reseal Manager can make a pause indefinite when Dual Governance is outside its normal state.

Why a pause may include repayment

A pause blocks actions subject to the controller, including repayment, lender withdrawals, liquidation, settlement, and direct interest updates. Even a direct call to the core cannot bypass the pause. Vault-share transfers and core functions outside the controller’s scope remain available. The core accounting specification uses elapsed time to calculate interest, and the controller rules explicitly say a later successful accrual covers time since the last update.

The proposal warns that initial price feeds, or oracles, use issuer-published collateral rates, which may diverge from secondary-market prices. If collateral falls in the market without a corresponding rate change, liquidation may become uneconomic and settlement may deliver collateral worth less than the debt canceled. Pausing those transactions can contain that risk, while also interrupting borrowers trying to repay.

For the first WETH/wstETH market, the configuration of the pause duration and who can extend it indefinitely will determine how long borrowers could be stuck. The published Reseal Manager and Dual Governance implementations require an active finite pause and an authorized Reseal Committee acting through the governance contract. That path can replace the finite pause with an indefinite one without a fresh ordinary DAO vote at that step.