Aug 6, 2026

3 min read

Hardening weETH, creating the market standard

weETH recently underwent a significant hardening process, encouraged and pushed by Steakhouse Financial. Here’s what we changed and what that means.

With the increase in institutional usage of ether.fi’s weETH asset, we developed the ambition to make weETH a market standard. We pursued a protocol hardening process to mitigate counterparty risk in ourselves as operators from the perspective of a depositor. Role governance in DeFi can be enforced with very hard constraints when done well and can significantly reduce the exposure to a single party for a user of a protocol. These types of mitigations are typically the sort of hardening requirements that lending venues have before onboarding new collateral.

Although weETH had been approved as collateral on most markets, we turned to Steakhouse Financial for additional guidance on getting added to their vaults. Their standards are the highest we have seen from any lending venue and were materially useful and specific in guiding us to removing risk surfaces and hardening weETH.

We deeply appreciate Steakhouse Financial offering their time in providing this guidance, which we endeavored to follow to the letter over the past few months.

weETH is better now. Here’s what changed.

Why harden weETH?

Steakhouse Prime Vaults typically hold a short list of assets, and the end goal was for weETH to join them.

The motivation reached past a single venue. A hardened protocol makes weETH better collateral everywhere it’s deployed, and it makes ether.fi safer for every holder, whether they ever borrow against weETH or not.

The work ran in three phases: governance first, then the protocol itself, then protections that could take weETH beyond today’s standard practice.

Phase one: governance

The first phase required fixing weETH’s governance framework, not contracts. Steakhouse’s suggestions centered on two things: extending the reaction window depositors get before any change takes effect, and distributing authority beyond a single organization.

Upgrade authority now moves slowly enough for depositors to see changes coming and react, and a majority of upgrade signers are independent ecosystem entities: node operators, DeFi protocols, security firms. Slashing registration became a publicly visible, time-delayed process behind the upgrade timelock.

Phase two: the protocol itself

Phase two of the hardening process focused on what the token code allowed. It was a set of thirteen upgrades that closed the gap to other prime assets.

The items group into five areas.

Bounded oracle reports. The oracle, the root trust assumption of any staking token, now validates every report against hardcoded ceilings before it can touch the exchange rate, bounding even a worst-case committee failure to plausible changes.

A deterministic exit path. Once a withdrawal finalizes, the ETH is escrowed at a frozen rate and nothing stands between the user and their funds, not even a protocol-wide pause.
Pauses that expire. A pause now lifts on its own rather than staying in place until someone removes it.
Scoped administrative authority. Administrative authority moved into scoped roles behind timelocks and multisigs.
Contract-level hardening. From the mint path to reentrancy protection, the remaining surface is closed.

Phase three: past the baseline

The suggestions didn’t stop at what other prime assets already do. Some went further: measures that would strengthen weETH beyond today’s standard practice.

ether.fi implemented those too:

A redemption fallback that lets users exit even if the oracle goes dark entirely.
Safety bounds written as immutable code rather than adjustable parameters.
Blacklisting for malicious users.
A cryptographic hard-disable on slashing exposure, with no onchain re-enable.

What prime means

weETH is now among the few assets featured on Steakhouse’s Prime Vaults. The weETH/USDC and weETH/USDT markets are live with an 86% LTV.

The security upgrade audit and the contracts repo document each step for anyone who wants to verify.

For weETH holders, the practical takeaway is simple: their collateral now works harder in the most conservative venue on Morpho.

This post reflects the Steakhouse weETH Collateral Onboarding Proposal (March 2026) and the associated 26Q2 security upgrade. Reference to the full audit report. For more on Steakhouse Financial, visit their site. For more on ether.fi and weETH, visit ether.fi.

Continue reading

Jul 22, 2026•Seongyun Ko

Why KPK made weETH a core holding

KPK, a noncustodial onchain asset manager with $200m+ under management, has allocated $25m+ to weETH as a core strategy asset. Inside the 65-point due diligence review weETH had to clear — and the ether.fi infrastructure that stood up to it.

Jul 14, 2026•Yash Saraswat

Safe Staking, From Doctrine to Code

weETH earned the first independent A+ risk rating in liquid restaking, weeks after we redeemed a fifth of TVL under industry-wide stress. Now the doctrine behind it is compiled into the contracts: non-custodial by construction, safety enforced in code, active defense measured in seconds.

Jun 23, 2026•Seongyun Ko

Non-custodial, actively defended: how ether.fi thinks about security

When an exploit hits a DeFi protocol, the window to prevent loss is measured in seconds. ether.fi is built, end to end, to use them. How non-custodial design and active defense work together across four layers.