Restaking Eigenlayer

---
name: restaking-eigenlayer
description: Detect restaking / AVS bugs — EigenLayer / Symbiotic / Karak operator slashing edge cases, withdrawal-queue gaming, cascading-slashing across AVSs, LST depeg solvency, AVS opt-in granularity. Activate on EigenLayer / Symbiotic / Karak imports, StrategyManager, DelegationManager, EigenPod, AVS registration, slasher contracts.
---

# Restaking / EigenLayer detection

## When this applies

- AVS implementations using EigenLayer / Symbiotic / Karak / Babylon
- Restaking deposit / withdrawal contracts
- Operator-management contracts
- LST-restaking integrations

## Detection patterns

### Withdrawal queue gaming (HIGH)
User queues withdrawal, performs slashable action, unqueues if slashing didn't hit. Defense: slashing must apply to in-flight withdrawals too.

### Cascading slashing across AVSs (HIGH)
One operator opts into many AVSs. A slash by AVS-A reduces stake → AVS-B's quorum requirement may not be met. Solvency check before slashing.

### AVS opt-in without delegator consent (HIGH)
Operator opts into a new AVS, exposing delegators to its slashing conditions without notice. Required: opt-in announcement + delegator-side withdrawal window.

### Slashing magnitude unbounded (CRITICAL)
Bad AVS spec slashes 100% on a single condition. With multiple AVSs sharing operator, this can drain the operator's restakers entirely. Cap per-slash magnitude.

### Off-chain slashable evidence verifiability (HIGH)
Slashable conditions claim cryptographic provability. If proof is forgeable or the verifier has a bug, false slashing possible.

### EigenLayer strategy-manager + delegation-manager interaction (HIGH)
Strategy positions and delegation are separate. Race conditions between staking, delegating, and withdrawing. Off-by-one in undelegation queue can lock funds.

### EigenPod verifyWithdrawalCredentials (HIGH)
Beacon-chain withdrawal credentials must match EigenPod address. Mismatch → funds locked.

### Operator commission update timing (MEDIUM-HIGH)
Operator can update commission instantly → flash-claim rewards at higher rate. Required: delay on commission updates.

### LST depeg solvency (HIGH)
Restaking accepts LSTs at face value. LST depeg → restaking is undercollateralized. Required: solvency check or repricing.

### Symbiotic vault FullRestake vs NetworkRestake confusion (HIGH)
Different vault delegator types have different slashing semantics. Misconfiguration → slashing applies to wrong stakers.

### Karak DSS registration auth (HIGH)
DSS (Distributed Secured Service) registration without operator-consent check.

### AVS slasher centralization (HIGH)
Slashing authority is a single EOA → can falsely slash. Required: timelock + multi-sig on slasher.

### Pre-slash withdrawal griefing (MEDIUM)
Operator queues large withdrawal just before a slashable event → effective slash magnitude reduced. Required: pre-slash freeze.

## Severity rubric

| Pattern | Severity |
|---|---|
| Slashing magnitude uncapped → drainable | **Critical** |
| Slasher centralization (single EOA, no timelock) | **High** |
| Cascading-slash insolvency on cross-AVS | **High** |
| Operator opt-in without delegator notice/window | **High** |
| Forgeable off-chain evidence in slashing | **High** |
| Withdrawal-queue gaming | **High** |
| LST depeg solvency unaccounted | **High** |
| Commission update with no delay | **Medium-High** |
| Pre-slash withdrawal grief | **Medium** |

## Remediation patterns

- Slashing caps: per epoch, per asset, per AVS.
- Delegator opt-out window when operator joins new AVS.
- Solvency check: total restaked value ≥ outstanding obligations at oracle price.
- Slasher gated by timelock + multi-sig.
- LST repricing or wrapped-LST (wstETH-style) to avoid rebase confusion.
- Commission update delay (≥ 1 epoch).
- Pre-slash freeze on withdrawal queue.

## False-positive notes

- Canonical EigenLayer / Symbiotic contracts are audited — focus on app-side integration.
- AVS implementations may legitimately have aggressive slashing for security guarantees; verify the spec was followed.

## Related

- [[restaking-specialist]] (subagent)
- [[oracle-manipulation]] (LST pricing)
- [[centralization-risk]]