An AVS is a decentralized service built on Ethereum that provides custom verification of off-chain work, made of on-chain contracts for verification plus an off-chain network of operators who execute the service and post evidence back to those contracts. EigenLayer now expands the acronym as Autonomous Verifiable Service. It entered the vocabulary as actively validated service, which is still what most of the ecosystem says, so both readings point at the same object and older material will use the older phrase.
An AVS writes its own slashing rules, and EigenLayer does not require them to be provable onchain. That single permission is what separates AVS security from Ethereum's, where the offense list is fixed and objectively attributable.
Scroll to see the full diagram
The name changed, the object did not
EigenLayer's current developer documentation defines an Autonomous Verifiable Service as a decentralized service built on Ethereum that provides custom verification mechanisms for off-chain operations.1 The older expansion, actively validated service, is what the term was introduced as and what the wider ecosystem still uses in blog posts, dashboards and integration docs.
The example list moved as well, which matters more than the acronym. EigenLayer's own page now gives rollup services, co-processors, cryptography services and zero-knowledge proof services as the shape of what gets built, and frames the only hard requirement as evidence of the off-chain execution being posted on-chain so the service can be verified.1 Anyone quoting a 2024-era list of sidechains, bridges and keeper networks is quoting a page that has been rewritten underneath them.
Three parts, and two of them are not onchain
An AVS is composed of on-chain contracts for verification and an off-chain network of operators who execute the service and post evidence of that execution back to those contracts. Tasks can be initiated by contract, by direct communication with operators, or through an aggregator, and the split between off-chain execution and on-chain verification is left entirely to the developer. If operators perform properly the AVS can distribute rewards autonomously; if they perform maliciously their delegated stake can be slashed autonomously and the operator can be removed from the operator set.1
The reason a founder builds this way is bootstrapping. Consensys frames EigenLayer as a marketplace between restakers seeking additional yield and services seeking cryptoeconomic security, with pooled security letting one balance of restaked ETH back many services at once.4 Standing up an independent validator set means acquiring capital that has better-paying alternatives. Pooled security lets a new service rent what it would otherwise have to buy.
Each service writes its own slashing rules, and they need not be provable
EigenLayer states that its slashing function is maximally flexible: services may slash any operator with stake delegated within their operator sets, and may design their protocols to slash for any reason. It says directly that slashing does not have to be objectively attributable, meaning provable onchain, while encouraging services to publish clear process around how their conditions work.2
Operators carry the diligence burden for that. The protocol tells them they are responsible for fully understanding the slashing conditions and risks of an AVS before opting into an operator set and allocating stake, because once allocated those funds may be slashable under whatever conditions the service set.3 Stakers who delegated to that operator inherit the outcome without having read anything.
In our view this is the single most important sentence for anyone building on top: the AVS slashing condition is the product's actual risk document, and it is written by a third party the depositor never contracted with.
Redistribution changed who benefits from a slash
Slashed funds were originally burned. Under redistributable operator sets, introduced by ELIP-006, they can instead be transferred to a redistribution recipient the AVS specifies when the set is created, a role the AVS controls and cannot change afterwards.3 A seven day resolution delay sits between the slash and the transfer, and natively restaked ETH is excluded from redistribution entirely, staying locked in the EigenPod contract instead.2
EigenLayer names the consequence itself: there is a larger incentive to slash when redistribution is enabled, and redistributable sets may offer higher rewards which should be weighed against the increased risk.3 A penalty that pays somebody is a different instrument from a penalty that burns. Any depositor-facing product built on redistributable sets now has a counterparty who profits from the depositor being penalised, and that belongs in the disclosure rather than in a governance forum thread.
This page is reference material for design work. It is not investment advice and not a recommendation about any protocol or asset.
Common questions
What does AVS stand for?
EigenLayer currently expands AVS as Autonomous Verifiable Service and defines it as a decentralized service on Ethereum providing custom verification of off-chain operations.1 The term was introduced as actively validated service, and that older phrasing remains common across the ecosystem. Both refer to the same construct, so material written before the rename is describing the same object under a different name.
What can be built as an AVS?
Any off-chain service whose execution can be verified on-chain. EigenLayer states the scope is broad and the only requirement is that evidence of the off-chain execution is posted on-chain, and it gives rollup services, co-processors, cryptography services and zero-knowledge proof services as current examples.1 Earlier documentation listed a different set, so example lists from 2024 no longer match the protocol's own page.
How does AVS slashing differ from Ethereum slashing?
Ethereum's offense list is fixed and provable onchain. An AVS defines its own conditions, and EigenLayer states that its slashing function is maximally flexible, that services may slash for any reason they design for, and that slashing does not have to be objectively attributable.2 Operators are made responsible for understanding those conditions before allocating stake, and delegating stakers inherit the result.3
See LST and LRT Tokenomics Design for how this applies in practice.
Sources
- AVS Overview
EigenCloud, Eigen Labs, 2026
Current canonical definition of an Autonomous Verifiable Service, the split between on-chain verification contracts and an off-chain operator network posting evidence, autonomous rewards and slashing, and the current example set of rollup services, co-processors, cryptography services and zero-knowledge proof services. Cloudflare returns 403 to automated clients; content read by stealth fetch on 3 August 2026. - Slashing Overview
EigenCloud, Eigen Labs, 2026
Slashing described as maximally flexible and not required to be objectively attributable, the burn versus redistribute paths, the seven day slash resolution delay, and the exclusion of natively restaked ETH from redistribution. Read by stealth fetch on 3 August 2026. - Operator Sets Overview
EigenCloud, Eigen Labs, 2026
Operator sets as the unit of opt-in and unique-stake allocation, the AVS-controlled redistribution recipient fixed at set creation, operator responsibility for understanding slashing conditions, and the statement that redistribution creates a larger incentive to slash. Read by stealth fetch on 3 August 2026. - EigenLayer: Decentralized Ethereum Restaking Protocol Explained
Consensys, 2024
The marketplace framing between restakers seeking yield and services seeking cryptoeconomic security, and pooled security allowing one balance of restaked ETH to back several services.
Last reviewed 2026-08
Know the terms but not sure how they apply to your project? That is what an engagement is for. We design, document, and stress-test the whole token economy inside the Tokenomics Data Room.
100+ projects advised. Complete tokenomics in 4 to 6 weeks.