ether.fi

A major liquid restaking protocol (eETH/weETH) since 3/2023, audited by multiple firms, with upgrades subject to a 10-day timelock. There have been no incidents involving eETH/weETH; the 9/2026 exploit affected only an old ether.fi Liquid contract, with losses of approximately USD 43 thousand.

• ✓Operating since 2023-03 (3 years)
• ✓Audited by 10 firms: CertiK, Omniscia, Nethermind, Solidified, Hats Finance, Zellic, Decurity, Halborn, Paladin, Certora
• ✓Bug bounty programme (Immunefi, up to $500k)
• ✓Large TVL: $5.2B
• ✓No material uncovered losses in the core product (incidents in isolated products or under $1M are listed separately)
• iRisk of the asset itself: eETH/weETH are liquid restaking tokens: there are risks of validator and restaking (EigenLayer) slashing, discounts relative to ETH during market stress, waiting for the withdrawal queue, and, for weETH on L2, dependence on the LayerZero bridge.
• iContract upgrades must pass through a 10-day timelock (getMinDelay = 864,000 seconds, read on-chain on 27/9/2026).
• iFollowing Kelp’s rsETH exploit (which did not affect ether.fi): the weETH bridge verification requirement was raised to 4/4 DVNs, weETH bridging on 8 smaller chains was halted from late 6/2026, and EtherFi Foundation contributed 5,000 ETH to DeFi United.