Skip to main content

📖 Context & Background

What is CSM

The Community Staking Module (CSM) is a family of two staking modules in Lido with permissionless entry, allowing any operator to run validators with less ETH and improved capital efficiency compared to solo staking.

It is designed to make participation as a Node Operator accessible to independent operators.

CSM originally supported a single module for 0x01 validators, but it is now evolving into a family of two complementary modules: 0x01 CSM and 0x02 CSM.

info

0x01 CSM is live on Ethereum Mainnet. The launch of 0x02 CSM has been approved by the DAO, with an expected mainnet release in Q4 2026.

Unless a page explicitly says otherwise, the operational guides in this section currently apply to 0x01 CSM only.


Why there are two CSM modules

Until now, CSM has worked exclusively with 0x01 validators, which have a maximum effective balance of 32 ETH. With the introduction of 0x02 credentials, CSM now has an opportunity to support compounding validators with balances of up to 2,048 ETH.

Supporting wider 0x02 adoption is important for Ethereum. Larger validators can compound rewards and consolidate stake into fewer validators, reducing consensus-layer overhead and helping prepare Ethereum for future improvements such as faster finality.

However, technical limitations make it difficult to support both credential types within a single CSM module. They also prevent CSM from capping 0x02 validators at different balances, which would be needed to offer a wider range of bond amounts. For this reason, 0x02 CSM will be introduced as a separate module built on the same CSM v3 codebase.

How the modules work together

Node Operators will be able to access and manage both modules through the same CSM interface. From an operator's perspective, selecting 0x01 CSM or 0x02 CSM will feel similar to selecting an operator type like ICS or IDVTC, even though they are separate modules under the hood.

The modules can be used in parallel. Operating in one does not prevent an operator from joining the other, but keys, bond, rewards, and allocation remain specific to the selected module.

Because they are separate modules, each one has its own stake share limit, with their limits adjusted over time within the overall capacity allocated to CSM via governance. Please note that these limits affect how much stake each module can receive, but they do not guarantee when a specific key will be deposited.

0x01 CSM vs 0x02 CSM

Dimension0x01 CSM0x02 CSM
AvailabilityLive on MainnetApproved; not yet deployed
Withdrawal credentials0x010x02
Maximum Effective Balance32 ETH2,048 ETH
Stake allocationFIFO queueInitial 32 ETH deposit followed by top-ups
Node Operator profilesDefault, ICS, and IDVTCSingle permissionless profile

Operator profiles and economics

0x01 CSM provides different profiles for permissionless operators, verified independent operators, and verified DVT clusters. 0x02 CSM uses a single permissionless profile.

ModuleProfileWho it is forBondNO rewardDAO fee
0x01DefaultAny operatorFirst key: 2.4 ETH
Subsequent keys: 1.3 ETH
3.5%6.5%
0x01ICSVerified Independent Community StakersFirst key: 1.5 ETH
Subsequent keys: 1.3 ETH
6% first 16 keys;
3.5% after
4% first 16 keys;
6.5% after
0x01IDVTCVerified DVT clusters of Independent Community StakersFirst key: 1.5 ETH
Subsequent keys: 0.5 ETH
3.5% first 64 keys;
2% after
6.5% first 64 keys;
8% after
0x02DefaultAny operatorFirst key: 32 ETH
Subsequent keys: 30 ETH
2%8%

Basic penalties and charges

CSM uses the bond to cover losses and charges caused by operator actions. The values below come from the 0x01 CSM v3 Mainnet configuration and the approved 0x02 CSM proposal.

Parameter0x01 Default0x01 ICS0x01 IDVTC0x02 Default
Key removal charge0.02 ETH0.01 ETH0.01 ETH0.02 ETH
Performance leeway3%5% for the first 150 keys;
3% after
3%3%
Strikes before ejection3 within 6 frames4 within 6 frames3 within 6 frames3 within 6 frames
Bad performance ejection penalty0.258 ETH0.172 ETH0.258 ETH0.258 ETH per 32 ETH of validator balance;
up to 16.512 ETH
Time to process a requested exit4 days5 days5 days4 days
Exit delay charge0.1 ETH0.05 ETH0.05 ETH0.1 ETH
General Delayed Penalty additional fine0.1 ETH0.05 ETH0.05 ETH0.1 ETH
  • Performance is assessed over 28-day frames. A strike is a warning rather than an immediate bond penalty, but reaching the applicable threshold can lead to validator ejection and a Bad performance ejection penalty.
  • Slashing and protocol violations are loss-based. If a penalty leaves the operator without enough bond, rewards replenish it first and unbonded validators may be requested to exit.

See Penalties for a simple overview of the mechanics and what operators should do.

Where to go next