LST and LRT Tokenomics: Token Design for Liquid Staking and Restaking Protocols

Last reviewed July 2026

• Minting and redemption: How receipt tokens are created against deposited stake, what backs the claim, and how withdrawal converts the token back to the underlying asset.

• Valuation and the exchange rate: How the token tracks the value of the underlying staked position, both on secondary markets and at the protocol's own redemption rate.

• Rebasing vs reward-bearing: Whether staking rewards arrive as a growing token balance (rebasing) or as a rising redemption rate on a fixed balance (reward-bearing, also called exchange-rate). The full comparison table is below.

A liquid staking token represents a staked position in a proof-of-stake network, so the underlying asset keeps earning consensus rewards while the token itself can move through lending protocols, AMMs, and derivatives markets. Beyond the three components above, the design covers how yield is split between depositors, node operators, and the treasury, how slashing risk is absorbed without breaking the peg, and how any governance token captures real demand. The first design decision shapes everything downstream, and it is the rebasing-versus-exchange-rate fork. After that come the protocol fee architecture, the slashing reserve, and the governance token.

The market scale is real. Lido, the largest liquid staking protocol, holds roughly $17.4 billion in TVL as of July 2026, per DefiLlama.^[5] Its stETH token paid a 7-day average staking APR of roughly 2.2% in July 2026, per Lido protocol data,^[6] and Lido's own documentation is explicit that stETH rebases while its wrapped counterpart wstETH is the non-rebasing, reward-bearing form built for DeFi integrations.^[7]

We design and audit LST token models as the full Tokenomics Data Room applied to a staking protocol. The revenue-first lens applies cleanly: the protocol fee architecture is the tokenomics, because the yield split determines what the treasury can fund and what the slashing reserve can absorb.

A liquid restaking token takes a staked position, ETH or an LST, and pledges it to secure additional networks called actively validated services, then wraps that position into a liquid token. That single move stacks new yield on top of base staking, and it stacks new risk on top too.

The design question is not just how to distribute yield; it is how to distribute risk. An LST manages one security obligation. An LRT manages several at once, each with its own slashing conditions, so every dimension of the tokenomics scales with the number of services secured. EigenLayer, the largest restaking protocol, holds roughly $5.0 billion in TVL as of July 2026, per DefiLlama.^[8] We design and audit LRT models inside the same Data Room, with the multi-vector slashing problem treated as the defining risk.

Vitalik Buterin drew the design boundary for this whole category in 2023: “dual-use of validator staked ETH, while it has some risks, is fundamentally fine, but attempting to ‘recruit’ Ethereum social consensus for your application's own purposes is not.”^[9] An LRT model that respects that boundary still has to price the risks it does take on, which is what the slashing-reserve work below is for.