# EigenLayer Competition: Hashlock Security Audit

**Client:** EigenLayer
**Engagement Date:** March 2025
**Engagement Type:** Security Competition Participation (Cantina)
**Project Type:** Restaking & AVS Infrastructure
**Network:** Ethereum
**Language:** Solidity
**Report Type:** Final Submission v2
**Security Rating:** ✅ **Audited**

🔗 **Project Website:** [eigenlayer.xyz](https://www.eigenlayer.xyz/)
🔗 **Hashlock Audit Page:** [hashlock.com/audits/eigenlayer-contest](https://hashlock.com/audits/eigenlayer-contest)

## About EigenLayer

As a restaking platform, **EigenLayer** allows stakers to deposit assets and delegate stake to operators. Operators register for **AVSs** (Autonomous Verifiable Services), external platforms that leverage this stake to secure offchain processes. The protocol introduces a new economic primitive to Ethereum: pooled security, enabling new services to bootstrap cryptoeconomic guarantees without launching their own validator set.

## The Engagement

EigenLayer hosted a security competition on **Cantina** in March 2025, covering major changes being made to the **core restaking protocol**. These changes included significant updates to most system contracts and introduced new contracts to manage slashing and slashable stake allocation.

**Hashlock participated in this competition with our auditor [@RODION](https://cantina.xyz/), who can be found on the public leaderboard.**

This represents a different format from Hashlock's standard private audit engagements. Competitions involve multiple independent auditors working concurrently to identify vulnerabilities, with submissions judged on uniqueness, severity, and quality. Hashlock's participation reflects our auditors' competitive security expertise and standing within the Web3 security community.

## Why Competition Audits Matter

Competition audits (also known as crowdsourced security contests) are increasingly used by top tier protocols as a complement to traditional audits. They:

- Bring together dozens of independent security researchers in parallel
- Surface vulnerabilities that may be missed by a single audit team
- Provide market validation through public leaderboards and severity rankings
- Have been adopted by leading protocols including EigenLayer, Aave, Optimism, and Spark

Hashlock's auditors actively participate in these competitions to keep our methodology sharp and our team competitive at the highest level of Web3 security research.

## Full Engagement Details

📄 [Read Hashlock's competition submission (PDF)](./EigenLayer-Competition-Submission-v2.pdf)

🌐 [View on hashlock.com](https://hashlock.com/audits/eigenlayer-contest)
📊 [View Cantina competition](https://cantina.xyz/)

## About Hashlock

Hashlock is a globally leading Web3 security firm headquartered in Australia, specializing in smart contract audits and blockchain security across the DeFi, gaming, RWA, AI, and infrastructure sectors. Our auditors come from competitive security backgrounds, including top placements in public contests and bug bounty programs, and have secured hundreds of protocols across the ecosystem.

**Chain agnostic with deep multi-chain expertise.** Hashlock audits any blockchain and any smart contract language. Recent engagements span Ethereum (Solidity, Vyper), Solana (Rust), Polkadot (Substrate), Cosmos (Go, CosmWasm), Aptos and Sui (Move), Starknet (Cairo), zero knowledge circuits, Bitcoin Scripts and BRC 20, plus many other ecosystems including newer Layer 1s on request.

🌐 **Website:** [hashlock.com](https://hashlock.com)
🤖 **Free AI Audit Tool:** [aiaudit.hashlock.com](https://aiaudit.hashlock.com)
📩 **Request an audit:** [Submit our RFI](https://hashlock.com/new-client-request-for-information)
📚 **More audits:** [Browse the full Hashlock Audits Repository](../../README.md)

---

_Hashlock's competition participation is publicly disclosed and documented on Cantina's platform._