Is Karak Safe?
Risk Grade: C+ (36/100)
Karak is rated as elevated risk — multiple novel mechanisms and notable interaction risks.
Elevated risk — novel multi-asset restaking across 7 chains with live slashing creates meaningful interaction complexity, partially offset by a clean track record, top-tier investor backing, and all pre-launch audit findings mitigated.
Karak (rebranding to OpenGDP) is a universal restaking protocol allowing users to restake ETH, liquid staking tokens, stablecoins, and LP tokens to economically secure Distributed Secure Services (DSSs) — applications such as oracles, bridges, and rollups. Launched in April 2024 with V2 (including the first live slashing mechanism in restaking) deploying in October 2024, Karak holds approximately $40M in restaked assets across 7 chains with $48M in Series A funding from Lightspeed, Pantera, and Coinbase. Its C+ grade reflects the novelty of multi-asset restaking across multiple chains, interaction complexity identified in a July 2024 audit (4 High findings, all mitigated), and the early stage of its DSS ecosystem. No loss-of-funds events have occurred on the protocol.
TVL
$40M
Mechanisms
7
Interactions
6
Value Grade
D
Key Risks for Karak Users
Multi-DSS operator slashing: operators who register with too many DSSs can be simultaneously slashed by all of them. If total slash demands exceed an operator's vault balance, some DSSs receive only partial compensation and stakers lose a portion of their restaked assets. Users should prefer operators with conservative DSS registration counts relative to their vault size.
Multi-asset collateral exposure: Karak accepts USDC, USDT, LP tokens, and Pendle PT positions alongside ETH. Regulatory actions freezing stablecoins (as occurred with Tornado Cash-linked USDC in 2022), or LP token value loss from impermanent loss, can reduce economic security without triggering automatic protocol responses. Restakers should understand the collateral mix in their chosen operator's vaults.
Core contract centralization: The Core contract controls all vault parameters, slashing adjudication, and asset additions. Without confirmed public timelock or DAO governance, Andalusia Labs retains centralized control. Changes to critical parameters could affect all staker positions.
Cross-chain finality risk: Karak operates across 7 chains with different finality assumptions. The 7-day slashing lookback window is calibrated for Ethereum L1; on faster chains (Arbitrum, BSC), withdrawal finality differences create potential edge cases for slash evasion.
Early-stage DSS ecosystem: the DSS marketplace is in its early stages. The quality and security of third-party DSS contracts varies; a buggy or malicious DSS could trigger incorrect slashing of operators, causing staker losses unrelated to actual operator misconduct.
Top Risk Factors
- •Concurrent multi-DSS slashing against a single operator can exceed that operator's vault balance — if an operator is over-allocated across multiple Distributed Secure Services simultaneously, all DSSs can slash at once, with some receiving only partial coverage. The Code4rena July 2024 audit identified related structural issues (4 High findings) that were mitigated, but the economics of multi-DSS over-allocation remain a design consideration.
- •Admin control over the Core contract — which governs all vaults, slashing adjudication, and asset additions — creates centralized upgrade risk without a confirmed timelock or multisig. Unilateral parameter changes or contract upgrades could affect all staker positions.
- •Multi-asset collateral (stablecoins, LP tokens, Pendle PT positions) introduces silent security decay: LP token values decline from impermanent loss without triggering any protocol-level response, and regulatory freezes of USDC/USDT could render DSS slashing inoperable for stablecoin-backed operator positions.
- •Cross-chain deployment across 7 networks creates finality mismatch risk: slashing conditions governed by Ethereum L1's 7-day lookback window may not fully account for differing finality assumptions on destination chains, creating potential edge cases for operators.
Risk Score Breakdown
Karak's highest risk area is Interaction Severity (14/20). Here's how each dimension contributes to the overall 36/100 score:
Read the Full Karak Risk Report
This protocol has 2 collapse scenarios. 2 high-severity interaction risks identified. See the full mechanism classification, interaction matrix, and deep-dive recommendations.
View Full Report →Considering an investment?