Stader Labs
DAMASCUSLiquid Staking · Multi-chain · $300M+ TVL · 10 contracts
Public risk assessment — scores are produced with the same methodology as monitored protocols
Security Profile
70
72
72
65
58
62
50
75
65
100
70
72
72
65
58
62
50
75
65
100
Audit History
Bug Bounty Program
Assessment
Multi-chain liquid staking protocol (28 months for ETHx). D5 moderate (58) for maturing governance. D6 moderate (62) for growing maturity. Established player in liquid staking but behind Lido and Rocket Pool in battle-testing.
Dimension Breakdown
How scores work →- Admin multisig controls protocol parameters
- Permissionless staking for users
- Node operator onboarding with collateral requirements
- Multi-chain deployment adds access control complexity
- ETHx liquid staking derivative
- Node operator SD token collateral requirement
- Withdrawal queue mechanism
- Moderate TVL across multiple chains
- Chainlink feeds for SD token pricing
- Internal oracle for ETH staking rate
- Multi-chain oracle dependencies
- Standard oracle integration patterns
- Live since early 2023 (~28 months for ETHx)
- Earlier BNB/Polygon variants since 2022
- Moderate production history
- Z-factor: 0.824
- SD token governance, maturing
- Admin controls key parameters
- Upgradeable proxy pattern
- Limited governance decentralization
- Maximum resilience under independent adversarial testing
- Comprehensive security coverage across all attack surfaces
- Active bounty program incentivizes continuous scrutiny
- No validated adversarial findings — score set to neutral baseline
- Professional team operations
- Multi-chain operational complexity
- Node operator management processes
- Active monitoring across chains
- ETHx integrates across DeFi (Aave, Curve, etc.)
- Multi-chain presence adds composition layers
- Node operator collateral creates internal composition
- Moderate composition surface
- Member of 1 dependency cluster(s)
- No cross-protocol cascade exposure detected
- Score: 100/100 (higher = more isolated from systemic risk)
- Source: cross_protocol_composition.json dependency analysis
- Standard Solidity with OpenZeppelin
- Modern compiler versions
- Multi-chain deployment infrastructure
- Standard dependency set
Risk Drivers
Primary risk factors driving this score, ordered by severity.
Adversarial Risk Signals
Observable security posture indicators. These signals reflect publicly verifiable information and responsible disclosure outcomes. No specific vulnerability details are exposed.
Score History & Verification
Score provenance tracking begins with the next reassessment.
On-Chain Data
- Protocol Slug
- "stader"
- Oracle
- BRORegistry (Base)
- Evidence
- IPFS (pinned)
- Staleness Threshold
- 24 hours
registry.getScore("stader")Reduce exploitable risk
BlackHart Monitoring provides continuous adversarial analysis, vulnerability detection, remediation support, and verified reassessment when your risk posture improves.