Join our Newsletter — 33% off our NHI Course
Home› Glossary› Cyber Security› Restaking
Cyber Security

Restaking

← Back to Glossary
By NHI Mgmt Group Updated October 29, 2026 Domain: Cyber Security

Restaking is the practice of reusing already staked assets or stake-backed security in another protocol or service. It extends economic security from one staking layer to another, so the same collateral can secure additional systems while also increasing correlated slashing or loss exposure.

What Restaking Changes in Security Design

Restaking does not just recycle capital, it recycles trust. By extending stake-backed security into another protocol or service, it changes the security model from a single enforcement layer to a shared one, where failure in the added layer can affect the original staked base.

This matters because the security of the second system is no longer independent. If the added protocol misbehaves, is misconfigured, or is economically attacked, the same collateral may be exposed to multiple loss conditions at once, reducing the separation practitioners usually expect between systems.

Why Restaking Is Attractive and Why It Is Hard

The appeal of restaking is efficient reuse of already committed economic security. Instead of forcing every new service to bootstrap trust from scratch, it can borrow from an existing staking pool and reach faster security alignment.

The hard part is correlation. When many services depend on the same underlying stake, losses can become linked rather than isolated. That creates a stronger systemic dependency than simple diversification would suggest, especially when the restaked asset secures protocols with different assumptions, operators, or failure modes.

Restaking, Slashing, and Shared Loss Exposure

Restaking is most important to understand as a shared-loss mechanism. The same collateral may now be subject to slashing or penalty conditions in more than one environment, which means misbehaviour, downtime, or rule violations can propagate beyond the original staking relationship.

That propagation changes how practitioners think about concentration risk. A small number of large restakers, operators, or delegated security relationships can become a correlated failure point if the same assets, validators, or operational controls underpin multiple secured services.

Where Restaking Fits in Security Governance

Governance for restaking is less about simple participation and more about explicit risk acceptance. Operators and protocol owners need to understand which obligations attach to the original stake, which attach to the borrowed security layer, and how conflicts are handled when the two systems have different risk appetites.

It also raises transparency requirements for dependency mapping. If a service depends on restaked collateral, it should be clear what is being secured, what penalties can be imposed, and how failure in one protocol could affect another. Without that clarity, users may assume isolation that does not exist.

Risk and Threat Considerations

Restaking introduces correlated exposure, meaning one compromised or badly governed security layer can produce losses across multiple services at once. The danger is not only theft or exploitability, but also shared punishment, cascading trust failure, and overconfidence in a security buffer that is already committed elsewhere.

Failure mechanism: An attacker, faulty protocol, or mismanaged operator can trigger conditions that cause the same collateral to be penalised in more than one place, amplifying the impact of a single incident.

Impact: The result can be wider slashing, reduced security margin, liquidity stress, and a loss event that spreads across otherwise separate services.

Standards & Framework Alignment

This section maps relevant standards and security frameworks to the operational risks and controls described in this guidance.

NIST CSF 2.0 and CIS Controls v8 set the technical controls, while ISO/IEC 27001:2022 defines the regulatory obligations.

FrameworkControl / ReferenceRelevance
NIST CSF 2.0GV.RM-01 — Risk Management StrategyRestaking is a risk-transfer and concentration decision across dependent systems.
ID.RA-05 — Threats, Vulnerabilities, and RisksRestaking creates cross-protocol exposure and correlated loss conditions that must be assessed.
Recommendation — Define how shared collateral risk is accepted, limited, and reviewed across secured services. Assess how shared security assumptions could amplify loss across dependent protocols.
CIS Controls v8CIS-17 — Incident Response ManagementRestaking failures can cascade and require coordinated response across affected services.
Recommendation — Coordinate response plans for penalty events, protocol failures, and cross-service exposure.
ISO/IEC 27001:2022A.5.23 — Information security for use of cloud servicesRestaking depends on external service relationships and inherited control assumptions.
Recommendation — Review third-party dependency terms and control assumptions before extending security trust.

Practitioner Guidance

Why practitioners should care: Restaking is an economic security design choice, not just a yield or efficiency feature. Treat it like a dependency decision, because the same assets may be carrying multiple security promises at once.

What to watch for: Pay close attention to who controls the restaked security path, what failure conditions can trigger penalties, and whether the added protocol changes the original risk profile in ways users may not expect.

Practitioner takeaway: If the same collateral is securing more than one system, governance should assume shared fate until proven otherwise.

Free weekly newsletter

Subscribe to the NHI & AI Identity Journal

The latest on NHI and Agentic AI security – articles, research, breaches, news and events every week.

Bonus 33% off our NHI Course when you subscribe.

NHIMG Editorial Note
Reviewed and updated by the NHIMG editorial team on October 29, 2026.
NHI Mgmt Group — the #1 independent authority on Non-Human Identity, IAM, and Agentic AI security. nhimg.org