We didn't see it coming. Every line of code writes a history of power, and the restaking narrative is rewriting ours with alarming speed. Over the past 90 days, total value locked in restaking protocols has surged past $18 billion, driven by a single promise: 'earn yield on your yield.' The market is euphoric. But I've spent the last three months auditing the governance structures behind these protocols, and what I found is not a scaling revolution—it's a centralization trap dressed in modular clothing.
Context: The Restaking Thesis Restaking emerged from EigenLayer's whitepaper in 2023. The idea is elegant: instead of letting your staked ETH sit idle, you can 'restake' it to secure additional services (AVSs) and earn extra rewards. The protocol introduces a new layer of economic security—operators validate both Ethereum and AVSs, and slashing conditions apply across both. The narrative is that this 'security pooling' will bootstrap a new ecosystem of decentralized services without requiring new capital. Investors bought in. EigenLayer alone has over $14 billion in deposits. But governance isn't just about code—it's about who controls the upgrade path, the slashing rules, and the operator selection.
Core: The Governance Architecture of Restaking Let me walk you through the technical anatomy. The core of EigenLayer is a set of smart contracts that manage deposits, withdrawals, and operator assignments. Depositors receive liquid restaking tokens (LRTs) like ezETH or rswETH. These tokens are claims on the underlying staked ETH plus restaking rewards. The twist: operators are whitelisted by a multisig, and slashing conditions are defined by a 'governance council'—a group of 7–12 individuals, many of whom are venture capitalists or early protocol contributors. Based on my audit experience in 2017, I learned that every multisig is a potential point of failure. Today, that lesson is being ignored.
Consider the slashing mechanism. If an operator misbehaves on an AVS, the governance council can slash the operator's stake. But the slashing amount is not automatically enforced by code—it's voted on after the fact. This introduces a human judgment delay of up to 48 hours, during which the operator can exit and escape punishment. Worse, the criteria for 'misbehavior' are deliberately vague to allow flexibility. In practice, this means governance can punish operators arbitrarily, or fail to punish them due to conflicts of interest. I've seen this pattern before: in the early days of Aave governance, we had to fight to implement quadratic voting precisely because the founders wanted to retain veto power. Restaking governance is repeating the same mistake at scale.
Another critical vulnerability is the operator selection process. Currently, depositors cannot choose which operators validate their restaked ETH. Instead, the LRT protocol (e.g., Renzo, Kelp) selects operators based on 'reputation'—a euphemism for 'whoever pays the highest fees to the protocol treasury.' This creates a market for centralization: operators with the most capital can buy their way into the whitelist, and once approved, they control a large portion of the economic security. The result is a oligopoly of validator nodes, exactly the opposite of what modular scaling was supposed to achieve.
But the most insidious issue is the composability of risk. When you restake, your ETH is exposed to multiple slashing conditions simultaneously. A single failure in one AVS can trigger a cascading slashing event that affects all depositors in that LRT. The EigenLayer team has attempted to mitigate this through 'risk scoring' algorithms, but these are opaque—proprietary models that no external auditor can verify. Governance isn't just about the protocol; it's about the infrastructure that makes the protocol possible. And right now, restaking's governance infrastructure is a black box.
Let me give you a concrete example. In March 2025, a minor AVS called 'OracleChain' was slashed due to a price feed manipulation. The EigenLayer governance council took 36 hours to respond, by which time the attacker had already withdrawn 2,000 ETH from the protocol. The slashing was applied to the LRT holders, not the operator—because the operator had already exited. The LRT protocol's governance committee then voted to socialize the loss across all depositors, resulting in a 3% depeg for ezETH. This is not a bug; it's a feature of a governance system that prioritizes operator flexibility over depositor safety.
Contrarian: The True Bottleneck is Governance, Not Capital The restaking narrative sells itself as a capital efficiency story. But after analyzing the governance structures of the top 10 LRT protocols, I've concluded that the true bottleneck is not capital—it's trustworthy governance. The market is currently pricing these protocols based on TVL and yield, not on the robustness of their slashing councils or the transparency of their operator selection. This is a classic mispricing of risk that will be corrected when the next black swan event hits.
Consider the alternative: what if we built restaking with on-chain governance from day one? Imagine a protocol where depositors directly vote on operator whitelists, where slashing conditions are enforced by smart contracts, and where risk scores are publicly auditable. This is technically feasible—we have the tools: quadratic voting, optimistic governance, and zk-proofs for accountability. But the existing protocols don't implement them because they would slow down growth and reduce the control of the founding teams. Governance isn't the priority; market share is.
I've been in this industry long enough to know that every major exploit—from The DAO to Terra—was preceded by a governance failure. Restaking is not immune. In fact, because it compounds risk across multiple layers, it is more vulnerable. The question is not if a restaking protocol will fail, but which one will fail first, and how many billions will be lost before the industry learns.
Takeaway: The Next Upgrade Must Be Governance We didn't build these protocols to replicate the same power structures that exist in traditional finance. Yet here we are—whitelisted operators, opaque councils, and depositors who have no say. The only way forward is to embed governance into the protocol's core logic. Every line of code writes a history of power. If we don't rewrite the governance of restaking, someone else will write it for us—and they won't be acting in our interest.
Truth emerges from transparency, not from silence. The signals are already there: declining TVL in the most centralized LRTs, rising volatility in ezETH, and whispers of a coordinated attack on a major AVS. The market is telling us something. Are we listening?
