ether.fi (weETH liquid restaking)

Rejected venues wait the longest for re-review; a rejection has to earn another look before the scheduled date.

REJECTED. weETH is a non-rebasing claim on ether.fi’s pooled eETH: deposits fund Ethereum validators, rewards change the eETH share rate, and the pool is also restaked through EigenLayer. The current primary record does not support the old claim that AVSs reliably add 1% to 3%; ether.fi now says restaking rewards are distributed separately through KING and that slashable AVS exposure applies when the protocol opts in. The decision nevertheless remains a refusal. ETHFI governance and its implementing multisig choose operators, upgrades, economics and where pooled ETH is restaked, while validator and restaking penalties are socialized across every depositor without a dedicated operator bond. That adds an administratively selected, correlated loss surface to ordinary ETH staking. Queued withdrawal and a documented instant route make the exit credible, but operational strength does not make the extra risk compensable at an unverified and non-contractual premium. Direct ETH, Lido stETH or Rocket Pool rETH provide the relevant staking exposure without deliberately adding AVS selection.

Kill criteria: the events that revoke this verdict
• Live slashable AVS and operator allocations are published and reconcile to deployed contracts for 12 consecutive months
• Net restaking rewards exceed the approved plain-staking alternative by a written margin for 12 consecutive months without points or unliquidated token emissions
• A funded first-loss layer becomes enforceable and absorbs validator and AVS slashing before depositor principal
• A significant slashing event publishes exchange-rate, liquidation, recovery and withdrawal outcomes sufficient to model loss
• Proposed-size queued redemption and secondary exit each pass the written time and slippage limits

The research file

Mechanism and holder claim

A depositor sends ETH to the LiquidityPool and receives rebasing eETH shares; weETH wraps those shares into a non-rebasing ERC-20 whose ETH conversion rate moves with the pool. The pool seeds validators with 1 ETH and completes the 32 ETH deposit after its oracle confirms withdrawal credentials. Consensus and execution rewards, penalties and the protocol fee flow through pooled accounting. The same pooled stake is restaked on EigenLayer. Ether.fi’s current documentation says any validator or restaking slashing is socialized across depositors and there is no dedicated operator bond. Restaking rewards are now described as a separate KING claim rather than a guaranteed increment to the weETH exchange rate. The economic unit is therefore pooled staked ETH plus governance-selected restaking risk, not a plain transferable claim on an individually controlled validator.

Governance and control

ETHFI is the governance token. Ether.fi says token holders may approve major upgrades, economic parameters, contributor permissions, node-operator admission and where ETH is restaked across AVSs. Foundation materials describe a phased system in which a proposer advances decisions and a multisig committee implements them and handles emergencies; the published roadmap still presents full ossification as an end state. Core contracts use a RoleRegistry and timelocks, and an oracle committee reports pooled validator and restaking balances. Those controls are transparent enough to identify, but they are load-bearing: a holder depends on correct oracle reporting, operator selection, AVS selection, upgrade execution and emergency action. The public governance pages do not establish that all those authorities are presently permissionless or immutable.

Incident and assurance record

Ether.fi publishes a large inventory of assessments and a public core-contract repository that describes regular audits, Certora formal verification and continuous monitoring. No realized principal loss in the eETH/weETH core pool or large AVS slashing charge was identified in the reviewed official record. That is a bounded finding, not proof of a clean history: the audit index is scope-specific and the absence of a large slash means the central restaking loss path remains lightly observed.

Exit and liquidity

A holder can unwrap weETH to eETH and request a standard withdrawal represented by an NFT. If the pool lacks unbonded ETH, validator exits must refill it before the request can be finalized and claimed. Ether.fi also documents instant redemption with a 0.3% fee and a rate limit, available only while buffer liquidity exceeds the stated 1% of eETH TVL low watermark. Secondary DEX exits add market price and venue liquidity risk. These documented mechanisms do not guarantee instant liquidity or bound losses during a slashing event.

Named alternatives and decision

The correct comparison is direct ETH staking or a liquid staking token such as Lido stETH or Rocket Pool rETH, not another restaking token. Each alternative has validator, smart-contract, governance and liquidity risk, but it does not by design let an additional AVS set impose socialized penalties on the same pooled principal. Ether.fi is operationally stronger than the original memo implied: it has deep integrations, an explicit queue and a documented instant route. The refusal is therefore not a scale or execution judgment. It is a product-fit decision: the primary record supplies no durable, separately measurable premium that compensates an advisory client for governance-selected AVS exposure, oracle dependence and a loss layer whose severe case has not yet been observed.

Observable reopening conditions

Reopen only after ether.fi publishes the live slashable AVS inventory, operator allocation, oracle quorum and every implementing governance authority in a form that can be reconciled to deployed contracts. Require at least twelve months of realized, non-promotional restaking reward history net of fees and KING-claim friction, plus a documented loss waterfall and funded first-loss protection that precedes depositor principal. A significant slash must be followed by on-chain evidence of the exchange-rate loss, recovery, liquidations and withdrawal timing. At proposed size, both queued redemption and secondary sale must complete inside written time and slippage limits. Until those observations exist, ordinary staking is the simpler exposure and the rejected allocation remains zero.

Sources

The claims above trace to these. Where a number could not be independently verified, the thesis says so.

• ether.fi documentation — protocol introduction and pooled restaking · primary · accessed 2026-08-14
  Supports: eETH and weETH mechanism, validator funding, EigenLayer restaking, socialized slashing, KING rewards
• ether.fi documentation — technical architecture · primary · accessed 2026-08-14
  Supports: LiquidityPool accounting, oracle committee, operator model, RoleRegistry and timelock, no dedicated bond
• ether.fi governance — ETHFI authorities · primary · accessed 2026-08-14
  Supports: upgrade authority, economic parameters, operator approval, AVS selection, treasury control
• ether.fi Foundation — phased governance and multisig · primary · accessed 2026-08-14
  Supports: proposer role, multisig committee, emergency authority, phased decentralization
• ether.fi documentation — direct withdrawal procedures · primary · accessed 2026-08-14
  Supports: queued withdrawal NFT, instant redemption, 0.3% fee, 1% buffer watermark, direct contract access
• ether.fi documentation — security assessments · primary · accessed 2026-08-14
  Supports: audit inventory, core-contract scope, bug bounty

Inherited controls

The verdict above grades the protocol layer. Every position also inherits the asset it holds and the chain it settles on. The least safe layer sets the position’s grade, and the position table names which one that is.