Stader Labs
DAMASCUSLiquid Staking · Multi-chain · $300M+ TVL · 10 contracts
Confidence 67%Z-Factor 0.76Updated 2026-05-17Public Score
Public risk assessment — scores are produced with the same methodology as monitored protocols
753
BRI Score
3004756508251000
Security Profile
Access Control
70
70
Economic Soundness
72
72
Oracle Integrity
72
72
Compositional Risk
65
65
Governance
58
58
Maturity
62
62
Resilience
50
50
Supply Chain
75
75
Op Security
49
49
Cascade Exposure
100
100
Access Ctrl
70
70
Economic
72
72
Oracle
72
72
Compos.
65
65
Govern.
58
58
Maturity
62
62
Resilience
50
50
Supply Ch.
75
75
OpSec
49
49
Cascade
100
100
Min
49
Avg
67
Max
100
Audit History
Sigma Prime
2023-04
Halborn
2023-01
Code4rena
2023-06
Bug Bounty Program
$250,000
Max payout on Immunefi
Assessment
Multi-chain liquid staking protocol (28 months for ETHx). D5 moderate (58) for maturing governance. D6 moderate (62) for growing maturity. Established player in liquid staking but behind Lido and Rocket Pool in battle-testing.
Dimension Breakdown
How scores work →Access Control
Weight 18%70% conf
70
arrow_forwardGood
+18Admin multisig controls protocol parameters
+18Permissionless staking for users
+18Node operator onboarding with collateral requirements
+18Multi-chain deployment adds access control complexity
receipt_longView provenance chainarrow_forward
Economic Soundness
Weight 13%70% conf
72
arrow_forwardGood
+18ETHx liquid staking derivative
+18Node operator SD token collateral requirement
+18Withdrawal queue mechanism
+18Moderate TVL across multiple chains
receipt_longView provenance chainarrow_forward
Oracle Integrity
Weight 13%70% conf
72
arrow_forwardGood
+18Chainlink feeds for SD token pricing
+18Internal oracle for ETH staking rate
+18Multi-chain oracle dependencies
+18Standard oracle integration patterns
receipt_longView provenance chainarrow_forward
Battle-Tested Maturity
Weight 12%65% conf
62
arrow_forwardModerate
+16Live since early 2023 (~28 months for ETHx)
+16Earlier BNB/Polygon variants since 2022
+16Moderate production history
+16Z-factor: 0.824
receipt_longView provenance chainarrow_forward
Governance & Upgradeability
Weight 10%62% conf
58
arrow_forwardModerate
+19SD token governance, maturing
+19Admin controls key parameters
+19Limited governance decentralization
receipt_longView provenance chainarrow_forward
Adversarial Resiliencelock
Weight 10%30% conf
50
Concerning
- Maximum resilience under independent adversarial testing
- Comprehensive security coverage across all attack surfaces
- Active bounty program incentivizes continuous scrutiny
- No validated adversarial findings — score set to neutral baseline
Operational Security
Weight 10%60% conf
49
arrow_forwardConcerning
-8No branch protection detected
-8CI/CD present but unstable (0% success)
+24Strong PR review culture (90% reviewed)
+24Dependabot enabled
receipt_longView provenance chainarrow_forward
Compositional Risk
Weight 5%68% conf
65
arrow_forwardModerate
+16ETHx integrates across DeFi (Aave, Curve, etc.)
+16Multi-chain presence adds composition layers
+16Node operator collateral creates internal composition
+16Moderate composition surface
receipt_longView provenance chainarrow_forward
Cascade Exposure
Weight 5%50% conf
100
arrow_forwardExcellent
+50Member of 1 dependency cluster(s)
0No cross-protocol cascade exposure detected
0Score: 100/100 (higher = more isolated from systemic risk)
+50Source: cross_protocol_composition.json dependency analysis
receipt_longView provenance chainarrow_forward
Supply Chain
Weight 4%70% conf
75
arrow_forwardGood
+19Standard Solidity with OpenZeppelin
+19Modern compiler versions
+19Multi-chain deployment infrastructure
+19Standard dependency set
receipt_longView provenance chainarrow_forward
Risk Drivers
Primary risk factors driving this score, ordered by severity.
Operational Security49
Adversarial Resilience50
Governance & Upgradeability58
Adversarial Risk Signals
Observable security posture indicators. These signals reflect publicly verifiable information and responsible disclosure outcomes. No specific vulnerability details are exposed.
Disclosure HistoryNot Assessed
Remediation VelocityNot Assessed
Bug Bounty ProgramNot Assessed
Audit CoverageNot Assessed
Incident HistoryNot Assessed
Score History & Verification
Score provenance tracking begins with the next reassessment.
On-Chain Data
- Protocol Slug
- "stader"
- Oracle
- BRORegistry (Base)
- Evidence
- IPFS (pinned)
- Staleness Threshold
- 24 hours
Read Score
registry.getScore("stader")Reduce exploitable risk
BlackHart Monitoring provides continuous adversarial analysis, vulnerability detection, remediation support, and verified reassessment when your risk posture improves.