diff --git a/package-lock.json b/package-lock.json
index c4e9a948..5c6b013e 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -3385,9 +3385,9 @@
       }
     },
     "lodash": {
-      "version": "3.0.1",
-      "resolved": "https://registry.npmjs.org/lodash/-/lodash-3.0.1.tgz",
-      "integrity": "sha1-FNSQKKOLx0AkHRHi7NV+wG1zwZo="
+      "version": "4.17.21",
+      "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.21.tgz",
+      "integrity": "sha512-v2kDEe57lecTulaDIuNTPy3Ry4gLGJ6Z1O3vE1krgXZNrsQ+LFTGHVxVjcXPs17LhbZVGedAJv8XZ1tvj5FvSg=="
     },
     "lodash.issafeinteger": {
       "version": "4.0.4",
@@ -10446,6 +10446,10 @@
         }
       }
     },
+    "web3": {
+      "version": "github:ethereum/web3.js#5d027191c5cb7ffbcd44083528bdab19b4e14744",
+      "from": "github:ethereum/web3.js"
+    },
     "whelk": {
       "version": "6.0.1",
       "resolved": "https://registry.npmjs.org/whelk/-/whelk-6.0.1.tgz",
diff --git a/package.json b/package.json
index 941027f0..9a4f4863 100644
--- a/package.json
+++ b/package.json
@@ -21,7 +21,7 @@
     "handlebars": "^4.0.11",
     "include-all": "~0.1.3",
     "lob": "^3.9.0",
-    "lodash": "~3.0.0",
+    "lodash": "~4.17.21",
     "mailgun-js": "^0.20.0",
     "passport": "0.2.1",
     "passport-facebook": "^1.0.3",