Symbiotic Review

Symbiotic is rated in our liquid restaking ratings as the restaking layer itself, not as a token a holder mints. Deposits sit in curator-run vaults, each holding one collateral asset, and are committed as slashable collateral to networks and applications. Since Core V2 launched on 1 July 2026, Symbiotic describes this as a collateral-markets platform. The earlier score assessed pre-V2 restaking infrastructure; this update re-scores it on what Symbiotic publishes now, checked on 1 November 2026. It is desk research from documentation, the audit list and the public GitHub repository, not a hands-on test.

How Symbiotic scores in liquid restaking

Five criteria, each marked 0 to 10, carry equal weight. The overall score is their plain average: (4 + 7 + 5 + 7 + 10) / 5 = 33 / 5 = 6.6.

Changes in this update: commission clarity rose from 2 to 4 after the fee documentation began stating vault fee caps; exit and redemption rose from 3 to 5 after the epoch withdrawal rule was documented; licence and code openness rose from 5 to 7 because the core licence's 19 July 2026 change date to GPL-2.0-or-later has passed. The overall score moves from 5.4 to 6.6.

Strongest criteria: audits and slashing mechanics

Audit disclosure (10)

The audits page names Bailsec, Statemind, OpenZeppelin, Ackee, Cyfrin, Sigma Prime, ChainSecurity, OtterSec, Certora and Zellic, plus Sherlock and Cantina contests, each with a scope and a month. Core V1 was reviewed by several firms in 2024; Core V2 and its extension by Bailsec and Statemind in June 2026. Dated, scoped reports across versions are what this criterion rewards. They review code, not the choices that decide a depositor's result: which applications a curator supports and how strict their slashing rules are.

Slashing & risk disclosure (7)

Symbiotic explains how slashing executes rather than only warning that it exists. The vault's Slasher contract acts on requests from an application's middleware after checking recorded stake. A slash cannot exceed the stake captured, and the capture can be no more than one epoch old. Where one vault backs several applications, a slash by one leaves less for the others. Because the mode is fixed per vault, a reader can tell before depositing whether anyone can contest a slash. The mark stops at 7 because the conditions themselves are written by each application, and the risks page can only recommend that they be "clearly defined, transparent, and proportional".

Weakest criteria: commission and exit

Commission clarity (4) reflects that there is still no single cost a holder can read. Symbiotic's fee documentation describes no fee charged by Symbiotic itself. Each vault's owner sets a management fee, capped at about 5% a year, and a performance fee, capped at 20%, both paid by minting new shares that dilute existing depositors. Publishing the caps and the method is what lifted the mark from 2; leaving the actual rates to each vault is what keeps it at 4, the same mark the category gives other entries whose fee structure is documented but whose rates vary. A liquid restaking token placed in front of a vault adds its own fee on top.

Exit & redemption (5) now has a documented rule. The epochs page says a request made in one epoch becomes claimable after the next epoch ends, so the wait is one to two epochs, with funds slashable until then; in the docs' example of a 7-day epoch, that is 7 to 14 days. The mark stops at 5 for two measured reasons. Epoch length is chosen per vault and can be lengthened, not shortened, by the curator, and in Core V2 withdrawals are paid first from idle collateral and then by recalling capital from adapters, which may return it immediately, partially or later. No protocol-wide figure exists.

Licence and code openness (7)

The core repository's LICENSE file names the licensed work as Symbiotic Core and sets 19 July 2026 as the change date to GPL-2.0-or-later. That date has passed, so under the file's own terms the covered code is now available under an open-source licence, which moved the mark from 5 to 7. It is not higher because the file has not been updated since and the contract files, including the Core V2 vault, still carry a BUSL-1.1 header. Business Source License terms allow each version its own change date, so the public material does not confirm that V2 code has converted.

What the score does not cover

• Individual vaults and curators. Fees, epoch lengths and slashing modes differ by vault and are not graded one by one.
• Lending exposure. Risk from protocols that receive idle capital is outside the criteria; our guide to how DeFi lending works covers it.
• Yield and points. Rewards and the points program are not scored.
• Access. The website terms exclude US residents and sanctioned persons. Availability does not enter the score.

Symbiotic vs the closest rated peers

Scores are as published on 1 November 2026. Symbiotic ties EigenLayer, the other restaking layer in the category, at 6.6; ties are listed alphabetically, so EigenLayer appears first. Symbiotic is 0.2 points behind YieldNest and 0.6 ahead of Mellow, whose legacy vaults restake into it. Renzo leads at 7.6.

Who this rating suits

The score is most useful to readers comparing restaking layers on audit coverage and slashing mechanics, or checking the base layer behind a vault they already hold. It is less useful to anyone who wants one fee and one withdrawal time, because Symbiotic leaves both to each vault. A 6.6 measures published disclosure, not safety, and is not a recommendation; see our methodology.