Lorenzo enzoBTC

This review reaches an adverse assessment because of unresolved disclosure gaps, not a negative finding. enzoBTC is Lorenzo Protocol’s omnichain wrapped-BTC token. Users can mint it from native BTC, WBTC, or BTCB, and three named custodians hold its backing. But this review could not confirm the redemption mechanism or timing, the custodian approval threshold, or any contract-level pause or freeze authority from primary sources. enzoBTC also depends on both LayerZero and Wormhole, two messaging layers that this registry has separately rejected. It also shares a named custodian, Cobo, with Function FBTC, which this registry rejected as well. That creates a concentration point across two products that a client might otherwise treat as diversified. The absence of a negative finding is not enough for approval when the basic facts needed to certify a position remain unconfirmed.

Review triggers: events that reopen the verdict
• Redemption mechanism, timing, and any gating conditions are independently confirmed and demonstrated at proposed size
• Custodian approval threshold and any contract-level pause, freeze, or upgrade authority are publicly disclosed and confirmed on-chain
• The May 2025 audit’s firm, full findings, and remediation status are independently confirmed via a primary source
• Twelve consecutive months with no depeg, custody, or bridge-dependency incident affecting enzoBTC specifically

Watched nightly: a warning on its venues or files, or a cited document that changes, reopens the memo. The first confirmation is due 2026-11-17.

The research file

Mechanism

enzoBTC is Lorenzo Protocol’s omnichain wrapped-BTC token. Users can mint it from native BTC, WBTC, or BTCB, and Lorenzo describes it as fully backed by BTC. It uses both LayerZero and Wormhole to move across chains. This registry reviewed and rejected both, so enzoBTC carries the risks of those messaging layers in addition to the risks of its own custody model. Users can deposit enzoBTC into Lorenzo’s yield vaults, which Lorenzo presents as an alternative to staking native BTC directly.

Control and governance

Three named custodial institutions, Cobo, Ceffu, and Chainup, hold the underlying BTC. Relayers validate Bitcoin-chain transactions and send block headers to a Lorenzo appchain that tracks activity. BANK, Lorenzo’s governance and utility token, lets holders vote on product settings, fees, and protocol upgrades. This is a token-governed system, not a fixed multisig with disclosed signers. This review could not confirm the exact pause, freeze, or blacklist powers in the enzoBTC or FBTC_Vault contracts, the custodian approval threshold, or the names of individual signers.

Incident record

This review identified no enzoBTC-specific depeg, exploit, or custody failure. A reported May 2025 audit round covered fund-custody logic in the FBTC_Vault and enzoBTC contracts and found minor reentrancy risks that were later patched. But this review could not independently verify the audit firm, exact findings, or confirmation of the fixes against a primary source. The claim rests only on a secondary summary.

Exit

This review could not confirm from primary sources the exact redemption process, its timing, or any limits such as KYC or a minimum size. That is a real, unresolved gap, not a negative finding in either direction. It means this review cannot now certify a client’s exit path.

Comparison

enzoBTC’s three named custodians are similar in structure to Function FBTC’s three-party Security Council, which this registry also rejected. The two products share Cobo as a custodian. That creates concentration across holdings for a client who might otherwise treat FBTC and enzoBTC as diversified BTC-wrapper exposure. Like FBTC and WBTC, this is custodial wrapped BTC, not sovereign BTC exposure. It also adds bridge risk that neither WBTC nor FBTC carries in the same way. The risk from its LayerZero dependency is not theoretical. This registry’s LayerZero V2 memo records the April 2026 compromise of LayerZero Labs’ own operating systems, which let attackers forge attestations and steal roughly $292M from a bridge using the same default trust configuration as enzoBTC.

Sources

The claims above trace to these. Where a number could not be independently verified, the thesis says so.

• Lorenzo Protocol Docs — enzoBTC: decentralized wrapped BTC for DeFi · primary · accessed 2026-08-17
  Supports: mechanism, custodian names
• Lorenzo Protocol — audit report repository · primary · accessed 2026-08-17
  Supports: audit listing, content not independently retrieved
• DefiLlama — Lorenzo enzoBTC protocol record · secondary · accessed 2026-08-17
  Supports: tracked TVL
• BingX — what is Lorenzo Protocol (BANK) · secondary · accessed 2026-08-17
  Supports: governance token, protocol overview
• WEEX — what is Lorenzo Protocol (BANK) and how does it work · secondary · accessed 2026-08-17
  Supports: relayer mechanism, appchain

Inherited controls

The research above describes the protocol layer. Every position also inherits the asset it holds and the chain it settles on. The layer with the most administrative power sets the position’s effective control; that describes control, not quality or suitability.