You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: AUDIT-PAYMENTS.md
+15-15Lines changed: 15 additions & 15 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -2,13 +2,13 @@
2
2
3
3
**Date:** 2026-02-03
4
4
**Auditor:** Subagent (payments-audit)
5
-
**Scope:** Payment distribution flow, operator vs restaker compensation
5
+
**Scope:** Payment distribution flow, operator vs staker compensation
6
6
7
7
---
8
8
9
9
## Executive Summary
10
10
11
-
The claims under investigation are **TECHNICALLY VALID** but the design appears **INTENTIONAL** for a restaking protocol where operator compensation is based on **risk commitment** (exposure) rather than **capital provided** (stake).
11
+
The claims under investigation are **TECHNICALLY VALID** but the design appears **INTENTIONAL** for a staking protocol where operator compensation is based on **risk commitment** (exposure) rather than **capital provided** (stake).
12
12
13
13
### Claims Investigated:
14
14
1. ✅ **CONFIRMED**: "Operator payment share is based on exposureBps (their claimed commitment), NOT actual stake"
| Operators | Risk commitment (exposure) |`exposureBps`| By design |
264
-
|Restakers| Capital provided (stake) |`totalAllScore`| ✅ Yes |
264
+
|Stakers| Capital provided (stake) |`totalAllScore`| ✅ Yes |
265
265
266
-
The operator payment path using `exposureBps` instead of actual stake is **likely intentional** for a restaking protocol where operators are compensated for the slashing risk they accept, while restakers are compensated for capital provided.
266
+
The operator payment path using `exposureBps` instead of actual stake is **likely intentional** for a staking protocol where operators are compensated for the slashing risk they accept, while stakers are compensated for capital provided.
267
267
268
268
**However**, without explicit documentation or proportionality guards, this creates potential for gaming if slashing is not credibly enforced.
/**Event with signature `PaymentDistributed(uint64,uint64,address,uint256,address,uint256,uint256,uint256,uint256)` and selector `0xbbd9474fbbb06eb636eb470aa71ad2133b5178d91593f96b8083204a60bea278`.
0 commit comments