Skip to content
Quantix Security Labs

Rimefall Restaking

Liquid restaking token across actively validated services.

Users deposit liquid staking tokens and receive a liquid restaking token. Deposits are delegated to operators securing external services; slashing conditions and withdrawal delays are inherited from the underlying restaking layer.

Ecosystem
ETHEthereum
Category
Restaking
Languages
Solidity
Launched
Dec 2025
72.2BBElevated risk

Grade BB · Elevated risk

Moderate risk; several areas need remediation.

+0.4 since Dec 2025 · ±0.0 since Jul 2026

Quantix Protocol Research · as of 24 Oct 2026 · About this data

Risk Index

How the score is built

Six weighted components, each scored 0–100 where higher means less risk. Points are the component value multiplied by its weight; the gap is what the component costs against a perfect score.
ComponentWeightValuePointsGap
Code Security30%7422.2−7.8
Operational Security20%7014.0−6.0
Governance Risk15%6810.2−4.8
Economic Security15%7210.8−4.2
Infrastructure Resilience10%747.4−2.6
Transparency10%767.6−2.4
Quantix Risk Index100%72.2−27.8
CodeOperationalGovernanceEconomicInfrastructureTransparencyRimefall Restaking, Code: 74Rimefall Restaking, Operational: 70Rimefall Restaking, Governance: 68Rimefall Restaking, Economic: 72Rimefall Restaking, Infrastructure: 74Rimefall Restaking, Transparency: 76
Risk Index components: Rimefall Restaking Code 74, Operational 70, Governance 68, Economic 72, Infrastructure 74, Transparency 76
ComponentRimefall Restaking
Code74
Operational70
Governance68
Economic72
Infrastructure74
Transparency76

Grade scale

  1. AAA90–100
  2. AA85–89.9
  3. A80–84.9
  4. BBB75–79.9
  5. BB70–74.9
  6. B65–69.9
  7. CCC60–64.9
  8. CC55–59.9
  9. C50–54.9
  10. D0–49.9

Score history

11 monthly snapshots

Each point is the Risk Index computed from that month’s component values. Markers below the chart show the events that moved a component; the history starts at launch in Dec 2025.
Rimefall Restaking Quantix Risk Index by month
PeriodQuantix Risk Index
Dec ’2571.8
Jan ’2671.8
Feb ’2671.8
Mar ’2671.8
Apr ’2671.8
May ’2672.2
Jun ’2672.2
Jul ’2672.2
Aug ’2672.2
Sep ’2672.2
Oct ’2672.2
  1. 25 May 2026

    Governance

    Delay added to operator changes

    Operator set changes now pass a 24-hour delay.

    • Governance Risk+3

Risk factors

What keeps the score from being higher, most severe first.
  • HighEconomic SecurityProfile analysis

    Inherited slashing risk

    Operators secure external services with their own slashing conditions; correlated slashing reduces backing.

  • MediumInfrastructure ResilienceProfile analysis

    Unbounded rate updates

    A faulty rate report could reprice rfETH abruptly for integrators.

Recommendations

Each recommendation raises one component to a target value. The score effect is recomputed with the Risk Index model, holding every other component fixed.
  • Economic Security: 72 → 78

    Operator diversification caps

    Cap delegation per operator and per external service.

    +0.9

    → 73.1

  • Infrastructure Resilience: 74 → 80

    Bound rate changes

    Reject exchange-rate moves beyond a daily bound pending review.

    +0.6

    → 72.8

Analysis

Contract, governance and operations

Contract analysis

Source
Verified
Upgradeability
Transparent proxy
Administrative control
Rimefall multisig (3-of-5) with a 24-hour delay
Enforced delay
24 hours
External dependencies
Underlying restaking layer; Operators securing external services; Rate oracle
  • PassSource verified. Contracts verified.
  • CautionSlashing inheritance. Slashing of delegated operators reduces rfETH backing.
  • CautionRate oracle bounds. Exchange-rate updates are not bounded per period.

Governance exposure

Moderate

Operator selection and upgrades through a multisig with a 24-hour delay.

Operational resilience

Adequate

Withdrawal delays inherited from the restaking layer; secondary liquidity covers exits.

Monitoring

Monitoring history

1 recorded security events for Rimefall Restaking, most recent first.
  1. 22 Apr 2026MediumNew operator added with 14% of delegated stakeConfiguration Change · DelegationManagerResolved

Research assessment

No Quantix assessment of Rimefall Restaking has been published. Its security findings are represented by the contract-analysis signals above: 0 failed and 2 cautionary.

Continue with

Comparable protocols

Compare side by side

Research

Relevant research

Publications on the risks that matter most for a restaking protocol.

Architecture

System components

DepositPool
Accepts LSTs and mints rfETH
DelegationManager
Assigns stake to operators
WithdrawalManager
Delayed withdrawals
RateOracle
Exchange-rate reporting

Turn risk factors into a remediation plan.

A research assessment traces each weakness to code, configuration or process, and verifies the fix before the score moves.