example-fork-detection
TEMPLATE — replace with the description of your rule. Should activate on the specific code patterns your fork has. Activate on…
@omermaksutiiInstall SkillSecurity
Skill
/restaking-eigenlayer
Detect restaking / AVS bugs — EigenLayer / Symbiotic / Karak operator slashing edge cases, withdrawal-queue gaming, cascading-slashing across AVSs, LST depeg solvency, AVS opt-in granularity. Activate on EigenLayer / Symbiotic / Karak imports, StrategyManager, DelegationManager,
Claude Code
$ npx -y skills add omermaksutii/RugProof --skill restaking-eigenlayer --agent claude-code
Codex
$ npx skills add omermaksutii/RugProof --skill restaking-eigenlayer -a codex -y
Cursor
$ npx skills add omermaksutii/RugProof --skill restaking-eigenlayer -a cursor -y
Gemini CLI
$ npx skills add omermaksutii/RugProof --skill restaking-eigenlayer -a gemini-cli -y
GitHub Copilot
$ npx skills add omermaksutii/RugProof --skill restaking-eigenlayer -a github-copilot -y
OpenCode
$ npx skills add omermaksutii/RugProof --skill restaking-eigenlayer -a opencode -y
Windsurf
$ npx skills add omermaksutii/RugProof --skill restaking-eigenlayer -a windsurf -y
SKILL.md
restaking-eigenlayer.SKILL.mdname: restaking-eigenlayer
description: Detect restaking / AVS bugs — EigenLayer / Symbiotic / Karak operator slashing edge cases, withdrawal-queue gaming, cascading-slashing across AVSs, LST depeg solvency, AVS opt-in granularity. Activate on EigenLayer / Symbiotic / Karak imports, StrategyManager, DelegationManager, EigenPod, AVS registration, slasher contracts.
Restaking / EigenLayer detection
When this applies
- AVS implementations using EigenLayer / Symbiotic / Karak / Babylon
- Restaking deposit / withdrawal contracts
- Operator-management contracts
- LST-restaking integrations
Detection patterns
Withdrawal queue gaming (HIGH)
User queues withdrawal, performs slashable action, unqueues if slashing didn't hit. Defense: slashing must apply to in-flight withdrawals too.
Cascading slashing across AVSs (HIGH)
One operator opts into many AVSs. A slash by AVS-A reduces stake → AVS-B's quorum requirement may not be met. Solvency check before slashing.
AVS opt-in without delegator consent (HIGH)
Operator opts into a new AVS, exposing delegators to its slashing conditions without notice. Required: opt-in announcement + delegator-side withdrawal window.
Slashing magnitude unbounded (CRITICAL)
Bad AVS spec slashes 100% on a single condition. With multiple AVSs sharing operator, this can drain the operator's restakers entirely. Cap per-slash magnitude.
Off-chain slashable evidence verifiability (HIGH)
Slashable conditions claim cryptographic provability. If proof is forgeable or the verifier has a bug, false slashing possible.
EigenLayer strategy-manager + delegation-manager interaction (HIGH)
Strategy positions and delegation are separate. Race conditions between staking, delegating, and withdrawing. Off-by-one in undelegation queue can lock funds.
EigenPod verifyWithdrawalCredentials (HIGH)
Beacon-chain withdrawal credentials must match EigenPod address. Mismatch → funds locked.
Operator commission update timing (MEDIUM-HIGH)
Operator can update commission instantly → flash-claim rewards at higher rate. Required: delay on commission updates.
LST depeg solvency (HIGH)
Restaking accepts LSTs at face value. LST depeg → restaking is undercollateralized. Required: solvency check or repricing.
Symbiotic vault FullRestake vs NetworkRestake confusion (HIGH)
Different vault delegator types have different slashing semantics. Misconfiguration → slashing applies to wrong stakers.
Karak DSS registration auth (HIGH)
DSS (Distributed Secured Service) registration without operator-consent check.
AVS slasher centralization (HIGH)
Slashing authority is a single EOA → can falsely slash. Required: timelock + multi-sig on slasher.
Pre-slash withdrawal griefing (MEDIUM)
Operator queues large withdrawal just before a slashable event → effective slash magnitude reduced. Required: pre-slash freeze.
Severity rubric
| Pattern | Severity | |---|---| | Slashing magnitude uncapped → drainable | **Critical** | | Slasher centralization (single EOA, no timelock) | **High** | | Cascading-slash insolvency on cross-AVS | **High** | | Operator opt-in without delegator notice/window | **High** | | Forgeable off-chain evidence in slashing | **High** | | Withdrawal-queue gaming | **High** | | LST depeg solvency unaccounted | **High** | | Commission update with no delay | **Medium-High** | | Pre-slash withdrawal grief | **Medium** |
Remediation patterns
- Slashing caps: per epoch, per asset, per AVS.
- Delegator opt-out window when operator joins new AVS.
- Solvency check: total restaked value ≥ outstanding obligations at oracle price.
- Slasher gated by timelock + multi-sig.
- LST repricing or wrapped-LST (wstETH-style) to avoid rebase confusion.
- Commission update delay (≥ 1 epoch).
- Pre-slash freeze on withdrawal queue.
False-positive notes
- Canonical EigenLayer / Symbiotic contracts are audited — focus on app-side integration.
- AVS implementations may legitimately have aggressive slashing for security guarantees; verify the spec was followed.
Related
- [[restaking-specialist]] (subagent)
- [[oracle-manipulation]] (LST pricing)
- [[centralization-risk]]
Read more
name: restaking-eigenlayer description: Detect restaking / AVS bugs — EigenLayer / Symbiotic / Karak operator slashing edge cases, withdrawal-queue gaming, cascading-slashing across AVSs, LST depeg solvency, AVS opt-in granularity. Activate on EigenLayer / Symbiotic / Karak imports, StrategyManager, DelegationManager, EigenPod, AVS registration, slasher contracts.
Restaking / EigenLayer detection
When this applies
- AVS implementations using EigenLayer / Symbiotic / Karak / Babylon
- Restaking deposit / withdrawal contracts
- Operator-management contracts
- LST-restaking integrations
Detection patterns
Withdrawal queue gaming (HIGH)
User queues withdrawal, performs slashable action, unqueues if slashing didn't hit. Defense: slashing must apply to in-flight withdrawals too.
Cascading slashing across AVSs (HIGH)
One operator opts into many AVSs. A slash by AVS-A reduces stake → AVS-B's quorum requirement may not be met. Solvency check before slashing.
AVS opt-in without delegator consent (HIGH)
Operator opts into a new AVS, exposing delegators to its slashing conditions without notice. Required: opt-in announcement + delegator-side withdrawal window.
Slashing magnitude unbounded (CRITICAL)
Bad AVS spec slashes 100% on a single condition. With multiple AVSs sharing operator, this can drain the operator's restakers entirely. Cap per-slash magnitude.
Off-chain slashable evidence verifiability (HIGH)
Slashable conditions claim cryptographic provability. If proof is forgeable or the verifier has a bug, false slashing possible.
EigenLayer strategy-manager + delegation-manager interaction (HIGH)
Strategy positions and delegation are separate. Race conditions between staking, delegating, and withdrawing. Off-by-one in undelegation queue can lock funds.
EigenPod verifyWithdrawalCredentials (HIGH)
Beacon-chain withdrawal credentials must match EigenPod address. Mismatch → funds locked.
Operator commission update timing (MEDIUM-HIGH)
Operator can update commission instantly → flash-claim rewards at higher rate. Required: delay on commission updates.
LST depeg solvency (HIGH)
Restaking accepts LSTs at face value. LST depeg → restaking is undercollateralized. Required: solvency check or repricing.
Symbiotic vault FullRestake vs NetworkRestake confusion (HIGH)
Different vault delegator types have different slashing semantics. Misconfiguration → slashing applies to wrong stakers.
Karak DSS registration auth (HIGH)
DSS (Distributed Secured Service) registration without operator-consent check.
AVS slasher centralization (HIGH)
Slashing authority is a single EOA → can falsely slash. Required: timelock + multi-sig on slasher.
Pre-slash withdrawal griefing (MEDIUM)
Operator queues large withdrawal just before a slashable event → effective slash magnitude reduced. Required: pre-slash freeze.
Severity rubric
| Pattern | Severity | |---|---| | Slashing magnitude uncapped → drainable | **Critical** | | Slasher centralization (single EOA, no timelock) | **High** | | Cascading-slash insolvency on cross-AVS | **High** | | Operator opt-in without delegator notice/window | **High** | | Forgeable off-chain evidence in slashing | **High** | | Withdrawal-queue gaming | **High** | | LST depeg solvency unaccounted | **High** | | Commission update with no delay | **Medium-High** | | Pre-slash withdrawal grief | **Medium** |
Remediation patterns
- Slashing caps: per epoch, per asset, per AVS.
- Delegator opt-out window when operator joins new AVS.
- Solvency check: total restaked value ≥ outstanding obligations at oracle price.
- Slasher gated by timelock + multi-sig.
- LST repricing or wrapped-LST (wstETH-style) to avoid rebase confusion.
- Commission update delay (≥ 1 epoch).
- Pre-slash freeze on withdrawal queue.
False-positive notes
- Canonical EigenLayer / Symbiotic contracts are audited — focus on app-side integration.
- AVS implementations may legitimately have aggressive slashing for security guarantees; verify the spec was followed.
Related
- [[restaking-specialist]] (subagent)
- [[oracle-manipulation]] (LST pricing)
- [[centralization-risk]]
Stats
11
Stars
0
Forks
Maintained
Maintenance
JavaScript
Language
MIT
License
Last commit
Created
Ships withrugproof
Rugproof your code before someone else does. 🌐 Live site: omermaksutii.github.io/RugProof 📦 Latest: v1.0.0 — 45 commands · 23 agents · 45 skills · 13 MCP servers · tested, offline-first, with rule packs, a benchmark, non-EVM coverage, and post-deploy
1152 skills23 agents
Stars on GitHub
Momentum
- stars in total
- 11
Other skills on rugproof.
@omermaksutiiInstall Skillsolady-erc20-permit2-a…
Detect unsafe assumptions about Solady's gas-optimized ERC20/ERC2612 permit and DN404 metadata. Solady's ERC20 uses custom…
@omermaksutiiInstall Skillsolady-ownable-init-fr…
Detect front-runnable ownership initialization in Solady Ownable / OwnableRoles. Solady's `_initializeOwner` is a guarded…
@omermaksutiiInstall Skillsolady-safetransferlib…
Detect Solady SafeTransferLib calls that assume the token has code. SafeTransferLib.safeTransfer/safeTransferFrom/safeApprove…
@omermaksutiiInstall Skillv4-hook-delta-accounti…
Detect Uniswap V4 hooks that fail to settle currency deltas with the PoolManager. Every credit/debit a hook creates…
@omermaksutiiInstall Skillv4-hook-permission-fla…
Detect Uniswap V4 hooks whose address-encoded permission flags don't match the callbacks the hook actually implements. In V4 the…
@omermaksutiiInstall SkillMore skills from other plugins.
api-security
Use for authorized security assessment of REST, GraphQL, WebSocket, or SOAP APIs, including discovery, authentication,…
@zhaoxuya520Install Skillabusing-dpapi-for-cred…
Extract and decrypt Windows DPAPI-protected secrets (Credential Manager, browser logins/cookies, Wi-Fi credentials, KeePass keys)…
@mukul975Install Skillclean-user-facing-text
Clean and finalize authorized natural-language text intended for readers by auditing suspicious invisible Unicode and rewriting…
@guillaumemeyerInstall Skill
Questions about restaking-eigenlayer.
- Which coding agents can use restaking-eigenlayer?
- restaking-eigenlayer installs in Claude Code, Codex, Cursor, Gemini CLI, GitHub Copilot, OpenCode and Windsurf with the skills CLI, using each agent's flag shown on this page. Flowy's auto-invocation, which fires a skill when your prompt matches, runs in Claude Code only.