Ethereum Restaking in 2026: Where Whales Are Depositing ETH Right Now
37M ETH staked (31% of supply). EigenLayer at $8.9B TVL. ether.fi at $5.2B. BlackRock ETHB launched. And the $292M Kelp exploit reshaped risk — here is where whale capital is flowing in May 2026.
Published 2026-05-12 · Deep Blue Alpha
Approximately 37 million ETH was staked as of May 2026 — roughly 31 percent of total supply — and EigenLayer’s restaking ecosystem held $8.9 billion in TVL across 1,900+ operators. The April 2026 Kelp DAO exploit ($292M, attributed to the Lazarus Group) reshaped whale risk appetite across restaking tokens. Deep Blue Alpha tracked whale flow on five key staking and restaking tokens: LDO (+$3.0M net, accumulation), PENDLE (+$3.6M net, accumulation), EIGEN (+$562K net, slight accumulation), ETHFI (−$5.2M net, distribution), and COMP (−$708K net, slight distribution).
BlackRock’s ETHB staking ETF launched in March 2026, drawing $250M in its first week and staking 70–95% of holdings through Coinbase Prime. Fidelity followed with $1.2B on day one. Institutional staking through regulated wrappers arrived in 2026 as a structural shift in how capital enters the Ethereum staking stack.
Live whale data at /token/LDO, /token/EIGEN, /token/ETHFI, /token/PENDLE. Sources cited inline. Updated May 2026.
The Ethereum staking landscape in May 2026 looks fundamentally different from even twelve months ago. Nearly a third of all ETH in circulation is locked in staking contracts. EigenLayer has grown restaking from a whitepaper concept into an $8.9 billion ecosystem with 1,900 operators. BlackRock and Fidelity launched staking ETFs that funnel institutional capital into Ethereum yield for the first time through regulated wrappers. And then the Kelp DAO exploit happened — $292 million drained through a bridge vulnerability in April — and the risk calculus for every whale holding restaking tokens changed overnight.
This post maps where whale capital is actually flowing across the Ethereum staking and restaking stack right now. Not where it was six months ago, not where the protocols say it should be going, but where the on-chain data from Deep Blue Alpha’s tracked whale wallets shows it moving as of May 2026. We cover the macro staking picture, the protocol-level TVL breakdown, the Kelp exploit aftermath, token-by-token whale flow data for LDO, PENDLE, EIGEN, ETHFI, and COMP, the new staking ETF channel, and what the aggregate whale flow pattern tells us about how large holders are repositioning around yield, risk, and the institutional on-ramp. Everything here is observational and retrospective — we track what whales did, not what they will do next.
The state of Ethereum staking in May 2026
Ethereum staking crossed a structural milestone in early 2026: approximately 35.9 to 37.3 million ETH was locked in staking contracts, representing roughly 29 to 31 percent of the total circulating supply. That figure has climbed steadily since the Merge in September 2022 and the Shanghai/Capella upgrade in April 2023 that enabled withdrawals, with no sustained reversal in the staking growth curve since.
The composition of that staked ETH has shifted meaningfully. Lido remained the single largest staking provider with approximately 8.7 million ETH staked — around 24.2 percent of the entire staking market. Lido’s dominance, while still significant, has been slowly diluted as institutional staking products and native restaking protocols have absorbed incremental capital. Lido’s V3 upgrade introduced modular stVaults, giving node operators and institutional participants more granular control over their staking infrastructure — a direct response to competition from protocols offering customizable restaking strategies.
The most structurally important new entrants in 2026 were the staking ETFs. BlackRock’s ETHB (iShares Ethereum Trust) launched on March 12, 2026, and drew $250 million in its first week. Fidelity’s competing staking ETF attracted $1.2 billion on day one. These products stake the majority of their held ETH — estimated at 70 to 95 percent for ETHB, through Coinbase Prime as the staking infrastructure provider — and pass the yield through to shareholders after fees. The gross staking yield on ETHB runs approximately 3.1 percent, with a net yield to investors of roughly 2 percent.
For context: base Ethereum staking yield from validators and liquid staking protocols like Lido sat at approximately 2.8 to 3.5 percent APY in May 2026. The ETF products deliver lower net yield because of management fees, but they provide something that native staking does not: regulatory clarity, brokerage-account accessibility, and zero smart-contract exposure for the end investor. That trade-off is what opened the institutional pipeline.
Ethereum staking overview — May 2026
| Metric | Value | Context |
|---|---|---|
| Total ETH staked | ~35.9–37.3M ETH | ~29–31% of circulating supply |
| Lido staked ETH | ~8.7M ETH | ~24.2% of staking market |
| Lido TVL | $38B+ | Largest liquid staking protocol |
| Base staking yield (validators / LSTs) | ~2.8–3.5% APY | Varies by provider and MEV share |
| BlackRock ETHB net yield | ~2% net | ~3.1% gross, minus management fees |
| Fidelity staking ETF — day one inflows | $1.2B | Institutional demand confirmation |
| ETH price | $2,268 | As of reporting date |
The structural shift: In 2024, less than 1% of staked ETH came through regulated institutional wrappers. By May 2026, BlackRock and Fidelity alone had channeled billions into Ethereum staking through ETF products. The base layer of staking has not changed — validators still attest blocks — but the composition of who is staking and through which wrappers has shifted permanently toward institutional rails.
EigenLayer and the restaking ecosystem: current TVL map
EigenLayer — the protocol that created the restaking category — held approximately $8.9 billion in TVL as of May 2026. The ecosystem encompassed over 1,900 operators securing Actively Validated Services (AVS), with $47 million in AVS operator rewards distributed. That reward figure matters because it represents actual revenue flowing to restakers beyond the base Ethereum staking yield — the economic justification for the additional risk that restaking introduces.
The liquid restaking protocols built on top of EigenLayer have their own TVL hierarchy, and the rankings shifted substantially in 2026 due to both organic growth and the Kelp exploit.
Restaking protocol TVL comparison — May 2026
| Protocol | TVL | Key Facts |
|---|---|---|
| ether.fi (eETH) | ~$5.2B | 96% on Ethereum; $50M buyback approved; migrated $220M to OP Mainnet (May 7) |
| Kelp DAO (rsETH) | ~$1.3B | $292M exploit Apr 19 (Lazarus Group, LayerZero bridge); post-exploit recovery |
| Puffer (pufETH) | ~$1.26B | Native restaking focus; steady TVL growth |
| Symbiotic | ~$897M | Permissionless model; any ERC-20 as collateral; ATH was $2.7B (Dec 2024) |
| Renzo (ezETH) | ~$217–753M | Cross-chain bridge unlocked $1.1B+; TVL range reflects bridge migration |
Sources: DefiLlama, protocol dashboards, public announcements. TVL figures are approximate and fluctuate with ETH price and deposit/withdrawal activity.
Restaking protocol TVL — horizontal comparison (May 2026)
ether.fi dominated the liquid restaking category at roughly $5.2 billion in TVL — more than the next four protocols combined. The protocol kept 96 percent of its deposits on Ethereum mainnet, approved a $50 million ETHFI buyback program, and migrated $220 million to Optimism mainnet on May 7 as part of a multi-chain expansion. ether.fi’s scale advantage is partly structural: its eETH token had the deepest DeFi integrations (Aave, Pendle, Morpho, Balancer) and the broadest cross-protocol composability.
Symbiotic represented the permissionless alternative, accepting any ERC-20 token as restaking collateral rather than restricting to ETH and LSTs. Its TVL of $897 million was substantially below its all-time high of $2.7 billion in December 2024, reflecting both market drawdowns and the broader restaking risk repricing that followed the Kelp exploit. Symbiotic’s model — modular, protocol-agnostic, permissionless — attracted a different whale profile than EigenLayer-native protocols: more DeFi-native, less institutional, willing to accept higher complexity for higher composability.
Renzo showed the widest TVL range ($217M to $753M) because of its cross-chain bridge architecture, which unlocked over $1.1 billion in previously bridge-locked capital. Depending on how bridge-resident capital is counted, Renzo’s effective TVL varies. The uncertainty itself is a data point — cross-chain restaking makes TVL measurement harder, and the Kelp exploit demonstrated what can go wrong when bridge infrastructure fails.
The Kelp DAO exploit: $292M and the aftermath
On April 19, 2026, Kelp DAO suffered a $292 million exploit attributed to the Lazarus Group, the North Korean state-sponsored hacking collective. The attack targeted the LayerZero bridge infrastructure used by Kelp’s rsETH token for cross-chain functionality. The exploit drained funds through a vulnerability in the bridge’s messaging layer rather than in EigenLayer’s core restaking smart contracts — a critical distinction for understanding what was actually compromised.
The cascading effects were immediate and severe. Aave’s total TVL dropped by approximately $6 billion as users rushed to de-risk positions that used rsETH as collateral. The liquidation cascade triggered a broader repricing of LRT collateral risk across lending protocols. Any DeFi protocol that accepted rsETH or other LRTs as collateral had to rapidly reassess the assumptions underlying those collateral listings — and several tightened parameters or paused LRT markets in the days following the exploit.
For the restaking ecosystem, the Kelp exploit was a watershed moment. It demonstrated that the risk surface of liquid restaking extends well beyond EigenLayer’s slashing mechanics into the bridge, oracle, and cross-chain infrastructure that LRT tokens depend on. A restaker holding rsETH was exposed not just to Ethereum validator slashing risk and EigenLayer AVS slashing risk, but to LayerZero bridge security — a dependency that most depositors had not priced.
Kelp DAO exploit — timeline and impact
| Event | Detail |
|---|---|
| Date | April 19, 2026 |
| Amount drained | $292M |
| Attack vector | LayerZero bridge vulnerability (messaging layer) |
| Attribution | Lazarus Group (North Korean state-sponsored) |
| Aave TVL impact | −~$6B (temporary cascade) |
| Kelp TVL pre-exploit | ~$1.6B |
| Kelp TVL post-recovery | ~$1.3B |
| EigenLayer core contracts | Not compromised |
The whale response was visible in the data. Deep Blue Alpha tracked net outflows of −$5.2 million from ETHFI in the period following the exploit — not because ether.fi was directly affected, but because the category-wide risk repricing caused large holders to reduce exposure to liquid restaking tokens broadly. When a $292 million exploit hits one restaking protocol, whales do not wait to assess whether their specific protocol is safe — they de-risk the category first and ask questions later. That is exactly what the ETHFI outflow data showed.
The Kelp exploit’s lesson for whale tracking: The exploit did not compromise EigenLayer’s core restaking contracts. It compromised bridge infrastructure — a dependency layer that most TVL metrics do not distinguish from the restaking layer itself. For whale capital, the takeaway was clear: restaking risk is not one thing, it is a stack. Validator risk, AVS slashing risk, smart-contract risk, bridge risk, oracle risk, and collateral-cascade risk each represent a distinct failure mode. The wallets that de-risked ETHFI after the Kelp exploit were pricing the stack, not just the protocol.
Where whale capital is flowing: DBA restaking token data
Deep Blue Alpha tracked whale activity across five staking and restaking-adjacent tokens over a recent 30-day window. The data below reflects on-chain DEX trading activity from DBA’s tracked whale wallets — wallets that have demonstrated sustained large-position trading activity on Ethereum. Net flow represents the dollar-denominated difference between whale buys and whale sells over the period.
DBA whale flow — staking and restaking tokens (30-day window, May 2026)
| Token | Tracked Whales | Trades | Volume | Net Flow | Direction |
|---|---|---|---|---|---|
| LDO (Lido) | 529 | 3,761 | $66.4M | +$3.0M | Accumulation |
| PENDLE | 494 | 3,841 | $80.1M | +$3.6M | Accumulation |
| EIGEN (EigenLayer) | 336 | 2,499 | $28.4M | +$562.3K | Slight accumulation |
| ETHFI (ether.fi) | 278 | 1,503 | $25.5M | −$5.2M | Distribution |
| COMP (Compound) | 383 | 2,560 | $48.5M | −$707.6K | Slight distribution |
Source: Deep Blue Alpha whale tracking. Whale wallets = wallets with sustained large-position DEX trading on Ethereum. Net flow = whale buys minus whale sells, USD-denominated. As of May 2026.
DBA whale net flow — staking & restaking tokens (30-day, May 2026)
The token-by-token breakdown tells a more nuanced story than the category-level summary. Below are detailed cards for the four most significant tokens in the DBA dataset.
LDO Lido DAO Live Data
Lido’s LDO had the largest tracked whale wallets of any staking token at 529 wallets generating 3,761 trades over the 30-day window. The +$3.0 million net accumulation came despite LDO trading at just $0.39 — a price level that represents a substantial drawdown from prior highs. Whale accumulation of a governance token at multi-year low prices, while the underlying protocol maintains $38 billion in TVL and a ~24% staking market share, is a pattern consistent with conviction positioning rather than momentum chasing. Lido’s V3 modular stVaults upgrade — which gives institutional participants more control over their staking infrastructure — may be part of the thesis driving accumulation from wallets with longer time horizons.
PENDLE Pendle Finance Live Data
PENDLE showed the strongest net accumulation of any token in the staking and restaking wallet group at +$3.6 million, with the highest volume ($80.1M) and most trades (3,841) across 494 tracked whale wallets. Pendle’s yield-tokenization protocol sits at the intersection of staking and DeFi yield strategy — it allows users to split yield-bearing assets into principal and yield components, enabling fixed-rate positions and leveraged yield exposure. The whale accumulation pattern suggests that large holders viewed PENDLE at $2.00 as attractively priced relative to the protocol’s position as critical yield infrastructure for the restaking stack. Pendle’s TVL has tracked closely with restaking growth, since eETH, stETH, and other staking derivatives are among its most heavily traded yield assets.
EIGEN EigenLayer Live Data
EIGEN showed slight net accumulation at +$562,300 across 336 tracked whale wallets, on lower volume ($28.4M) and fewer trades (2,499) than the LDO or PENDLE wallets. The moderate accumulation signal is notable because EIGEN is the governance and security token for the foundational layer of the entire restaking category. The modest whale flow may reflect uncertainty about EIGEN’s token utility as the protocol transitions from airdrop-driven circulation to long-term economic value — $47 million in AVS operator rewards is meaningful but not yet at a scale that supports a strong yield case for holding the governance token. Whale wallets appear to be accumulating EIGEN as an infrastructure bet rather than a yield play, with position sizes that suggest measured conviction rather than high-urgency accumulation.
ETHFI ether.fi Live Data
ETHFI was the clear outlier with −$5.2 million in net distribution — the largest outflow of any token in this analysis, on the smallest whale wallets (278 wallets) and lowest volume ($25.5M). ETHFI traded at $0.44, and the distribution occurred in the period following the Kelp DAO exploit. This is the category-risk repricing in action: ether.fi was not directly compromised by the Kelp exploit, but its ETHFI token is the governance token of the largest liquid restaking protocol, making it the most liquid proxy trade for "reduce restaking exposure." Whale wallets that wanted to de-risk the category could sell ETHFI faster and with less slippage than unwinding eETH positions, which require withdrawal queues. The distribution signal here reads as risk management rather than fundamental bearishness on ether.fi specifically.
Staking ETFs: BlackRock ETHB and the institutional on-ramp
The staking ETF category did not exist twelve months ago. By May 2026, it represented one of the most consequential structural shifts in the Ethereum staking stack — not because of the raw capital amounts (which are still small relative to total staked ETH), but because of what the products represent: institutional capital entering Ethereum yield for the first time through regulated wrappers.
BlackRock’s ETHB launched March 12, 2026, as an extension of the existing iShares Ethereum Trust. The fund stakes an estimated 70 to 95 percent of its held ETH through Coinbase Prime as the staking infrastructure provider. The gross staking yield runs approximately 3.1 percent APY, with a net yield to shareholders of roughly 2 percent after BlackRock’s management fee. ETHB drew $250 million in its first week — not a blockbuster by equity ETF standards, but a significant proof point that institutional allocators are willing to hold a staking-yield product in their brokerage accounts.
Fidelity’s staking ETF launched shortly after and attracted $1.2 billion on day one — a figure that dwarfed ETHB’s debut and signaled that the institutional appetite for Ethereum staking yield was broader and deeper than BlackRock’s first-week numbers suggested. The Fidelity product uses a similar architecture: hold ETH, stake the majority through an institutional custodian, pass yield to shareholders.
Ethereum staking ETF comparison — May 2026
| Product | Launch Date | Initial Inflows | Estimated Stake Rate | Gross Yield | Net Yield |
|---|---|---|---|---|---|
| BlackRock ETHB | Mar 12, 2026 | $250M (first week) | 70–95% | ~3.1% | ~2% |
| Fidelity Staking ETF | Mar 2026 | $1.2B (day one) | Majority | ~3.1% | ~2% |
Sources: public filings, ETF tracker data, and reporting as of May 2026. Stake rate and yield are estimates based on available disclosures.
The staking ETF channel matters for restaking economics because it creates a yield floor for institutional capital. An allocator who can earn ~2% net in a regulated, brokerage-accessible ETF has no reason to navigate smart-contract risk, bridge risk, and DeFi complexity to earn 3.5% in a liquid restaking protocol — unless the incremental yield justifies the incremental risk. The existence of staking ETFs puts competitive pressure on the restaking ecosystem to deliver meaningfully higher returns, not just marginally higher returns, to attract capital from the institutional pipeline.
For on-chain whale tracking, the ETF channel is partially invisible. ETF holdings are custodied at institutional custodians (Coinbase Prime for ETHB), and the staking transactions occur through the custodian’s infrastructure rather than from individually trackable whale wallets. DBA’s on-chain whale data captures DEX trading and wallet-level movements, not ETF inflows. This means the whale flow data in this analysis and the staking ETF data represent two complementary but separate capital channels: on-chain whales (trackable, DeFi-native) and institutional ETF allocators (mostly off-chain from a tracking perspective).
What the whale flow tells us
The aggregate pattern across the five tracked tokens resolves into a readable signal when you separate the components.
LDO and PENDLE accumulation = yield-seeking positioning. The two tokens with the strongest net accumulation share a common characteristic: both represent infrastructure that benefits from staking and restaking activity regardless of which specific restaking protocol wins. Lido captures the base staking layer (stETH feeds into restaking protocols as input collateral). Pendle captures the yield-tokenization layer (eETH, stETH, and other staking derivatives are among its most traded assets). Whale wallets accumulating LDO at $0.39 and PENDLE at $2.00 were positioning in the staking infrastructure that services the category rather than betting on a single restaking protocol.
EIGEN slight accumulation = infrastructure conviction at lower intensity. The +$562K net flow on EIGEN, on lower volume and fewer wallets than LDO or PENDLE, suggests measured conviction in the restaking category’s foundational layer. The smaller whale wallets (336 vs. 529 for LDO and 494 for PENDLE) likely reflects EIGEN’s shorter trading history and the token’s transition from airdrop distribution to organic price discovery. Whales appear to be building positions, but not with the urgency visible in LDO or PENDLE.
ETHFI distribution = exploit risk repricing, not fundamental rejection. The −$5.2M outflow from ETHFI was the largest net flow movement in the dataset, and it reads most cleanly as a category-risk response to the Kelp exploit. ether.fi’s protocol was not compromised. Its TVL at $5.2 billion is the largest in the category. The $50 million buyback approval and OP Mainnet migration are constructive protocol-level developments. But ETHFI was the most liquid proxy trade for "reduce restaking exposure," and whale wallets used it as exactly that. Whether the distribution reverses as the Kelp exploit recedes in the market’s memory is a question the data will answer in coming weeks — the current snapshot shows the de-risk trade, not a permanent thesis shift.
COMP slight distribution = sector rotation, not staking-specific. The −$708K net flow on COMP is the mildest signal in the dataset. Compound is a lending protocol, not a staking or restaking protocol, and its inclusion here serves as a DeFi benchmark. The slight distribution is consistent with broader DeFi governance token rotation patterns rather than restaking-specific dynamics.
The readable pattern: Whales accumulated staking infrastructure (LDO, PENDLE) and the restaking category’s foundational layer (EIGEN) while distributing the most liquid restaking governance token (ETHFI) in the wake of the Kelp exploit. The flow data is consistent with yield-seeking conviction in the staking category broadly, combined with active risk management around exploit contagion at the protocol-specific level.
How to track whale capital in staking protocols
The structured version of this methodology is also available as HowTo schema on this page. The full flow takes approximately 15 minutes per token.
Step 1 — Check total ETH staked and protocol TVLs
Start with the macro picture. DefiLlama’s Ethereum staking and liquid staking categories show total ETH staked, individual protocol TVLs for Lido, EigenLayer, ether.fi, Kelp, Puffer, Symbiotic, and Renzo, and 7-day or 30-day TVL changes. This gives you the baseline capital map before drilling into whale-level data. Pay attention to sudden TVL drops — these often signal exploit aftermath, mass withdrawals, or risk repricing events that the whale flow data will subsequently reflect.
Step 2 — Monitor restaking token whale flow on Deep Blue Alpha
Navigate to DBA’s token detail pages for key staking and restaking tokens: /token/LDO for Lido, /token/EIGEN for EigenLayer, /token/ETHFI for ether.fi, /token/PENDLE for Pendle. Each page shows live whale flow data including 24-hour, 7-day, and 30-day net flow, accumulation versus distribution ratio, tracked whale count, and trade volume. Compare net flow direction across multiple tokens simultaneously — category-level signals (like the post-Kelp ETHFI distribution) are more meaningful than single-token noise.
Step 3 — Watch for large stETH, eETH, and rsETH movements
Liquid staking and restaking tokens (stETH, eETH, rsETH, pufETH) move between DeFi protocols, DEXes, and centralized exchanges. Large movements of these tokens — particularly from exchange wallets to DeFi protocols or vice versa — can signal whale repositioning between staking strategies. DBA’s live feed and Etherscan’s token transfer tracker both surface these movements. Focus on transfers above 1,000 ETH equivalent as the signal-to-noise threshold for whale-level activity.
Step 4 — Compare staking yield to understand rotation incentives
Whale capital in staking and restaking follows yield differentials over medium time horizons. In May 2026, the yield stack ran approximately: base staking at 2.8–3.5% APY (Lido stETH), restaking with AVS rewards at variable incremental yield (ether.fi eETH), and staking ETFs at ~2% net (BlackRock ETHB). When restaking yield premiums compress or risk events reprice the category, whale capital rotates — and DBA’s net flow data on the governance tokens captures that rotation in near real time.
Frequently asked questions
How much ETH is staked in 2026?
Approximately 35.9 to 37.3 million ETH was staked as of May 2026, representing roughly 29 to 31 percent of total Ethereum circulating supply. Lido remained the largest single staking provider at approximately 8.7 million ETH (around 24.2 percent market share). The figure has grown steadily since the Shanghai/Capella upgrade enabled withdrawals in April 2023, with no sustained reversal in the growth curve.
What is EigenLayer and how big is its TVL?
EigenLayer is a restaking protocol that allows staked ETH to be reused as security collateral for Actively Validated Services (AVS). As of May 2026, EigenLayer held approximately $8.9 billion in TVL with over 1,900 operators and $47 million in AVS operator rewards distributed. The liquid restaking ecosystem built on EigenLayer includes ether.fi ($5.2B TVL), Kelp DAO ($1.3B), Puffer ($1.26B), Symbiotic ($897M), and Renzo.
What happened in the Kelp DAO exploit of April 2026?
On April 19, 2026, Kelp DAO suffered a $292 million exploit attributed to the Lazarus Group. The attack targeted LayerZero bridge infrastructure used by Kelp’s rsETH token, not EigenLayer’s core restaking contracts. The exploit triggered a cascade that temporarily reduced Aave’s TVL by approximately $6 billion as users de-risked LRT collateral positions. DBA tracked −$5.2M in ETHFI distribution in the following weeks as whales repriced restaking category risk.
Which restaking tokens are Ethereum whales accumulating?
Based on DBA tracked whale data as of May 2026: LDO showed +$3.0M net accumulation across 529 whales and 3,761 trades. PENDLE showed the strongest accumulation at +$3.6M across 494 whales. EIGEN showed slight accumulation at +$562K across 336 whales. ETHFI was in distribution at −$5.2M across 278 whales. COMP showed slight distribution at −$708K. Live data at /token/LDO, /token/EIGEN, /token/ETHFI, and /token/PENDLE.
How does BlackRock ETHB staking ETF work?
BlackRock’s ETHB (iShares Ethereum Trust) launched March 12, 2026 and stakes an estimated 70 to 95 percent of its held ETH through Coinbase Prime. The gross yield runs approximately 3.1% APY, with a net yield of roughly 2% after management fees. ETHB drew $250 million in its first week. Fidelity followed with $1.2 billion on day one. These products provide institutional investors with Ethereum staking yield through a regulated, brokerage-accessible wrapper with no direct smart-contract exposure.
What yield can you earn from Ethereum staking in 2026?
Base Ethereum staking yield in May 2026 ran approximately 2.8 to 3.5% APY through validators and liquid staking protocols like Lido. Liquid restaking through ether.fi and EigenLayer-native protocols added variable incremental yield from AVS rewards on top of the base rate. Staking ETFs like BlackRock ETHB delivered roughly 2% net after fees. Yield figures change continuously with network participation rates, MEV revenue, AVS reward cycles, and fee structures.
Is liquid restaking safe after the Kelp exploit?
No form of liquid restaking can be called safe in an absolute sense. The April 2026 Kelp DAO exploit ($292M via LayerZero bridge vulnerability) demonstrated that restaking risk extends beyond AVS slashing mechanics into bridge infrastructure, oracle dependencies, and cross-chain composability. EigenLayer’s core contracts were not compromised in the Kelp exploit, but the event repriced risk across the entire category. Whale flow data showed ETHFI distribution of −$5.2M in the following weeks, indicating that large holders actively reduced restaking exposure. Each protocol in the restaking stack carries its own risk profile, and bridge-dependent architectures carry additional attack surface that the Kelp exploit made visible.
How can I track whale deposits into staking protocols?
Deep Blue Alpha tracks whale wallet activity on staking and restaking tokens including LDO, EIGEN, ETHFI, PENDLE, and COMP with live data covering 24h, 7d, and 30d net flow, accumulation versus distribution ratio, top holding wallets, and conviction scoring. Token detail pages are at /token/LDO, /token/EIGEN, /token/ETHFI, /token/PENDLE, and /token/COMP. The full whale wallet leaderboard is at /wallets. For protocol-level TVL data, DefiLlama provides comprehensive breakdowns. DBA’s live feed surfaces individual large transactions in real time.
Bottom line
Ethereum staking in May 2026 has matured into a multi-layered capital stack: approximately 37 million ETH locked in staking contracts, a $38 billion liquid staking leader in Lido, an $8.9 billion restaking ecosystem anchored by EigenLayer, and a new institutional channel through staking ETFs from BlackRock and Fidelity. The Kelp DAO exploit — $292 million drained through a bridge vulnerability in April — was the most significant risk event the restaking category has faced, and its aftershocks were visible in DBA’s whale flow data as −$5.2 million in ETHFI distribution in the following weeks.
The whale capital flow data paints a picture of category-level conviction combined with protocol-level risk management. LDO and PENDLE — the staking infrastructure and yield-tokenization layers — attracted net accumulation from the largest whale wallets (529 and 494 tracked wallets respectively). EIGEN showed measured accumulation as a foundational-layer bet. ETHFI absorbed the selling pressure as the most liquid proxy for restaking risk reduction. The distinction between infrastructure accumulation and protocol de-risk is the most useful read of the data: whales remained constructive on the staking stack while actively managing exposure to the specific risk vectors that the Kelp exploit exposed.
Every data point in this analysis is drawn from on-chain transactions that anyone can verify. The interpretation is ours. The conclusions you draw should be your own, informed by your own risk tolerance, time horizon, and research beyond what any single source provides. If you are doing your own research on where whale capital is flowing in Ethereum staking, start with the data — DBA’s live token pages, DefiLlama’s TVL tracker, and the protocol dashboards — not the narrative.
Track whale flow across staking and restaking tokens
Deep Blue Alpha monitors whale wallet activity on LDO, EIGEN, ETHFI, PENDLE, COMP, and hundreds more Ethereum tokens with live net flow, conviction scoring, and wallet-level visibility — the same dataset used in this analysis, updated continuously.
Open the whale wallet leaderboard →