Signed/unsigned arithmetic confusion
Rocket Pool's assessment for RD-F-018 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
Core contracts (0.7.6) use uint throughout value-critical paths — no signed integer arithmetic in exchange-rate or deposit logic found. Saturn One contracts (0.8.30) have built-in overflow/underflow protection. No signed/unsigned confusion finding in any accessible audit summary.
Sources #
- GitHubRocketMegapoolDelegate.solRocketMegapoolDelegate.sol — uint types, 0.8.30 with built-in arithmetic protectionretrieved 2026-05-04
Methodology #
Determine whether signed-integer conversions or comparisons where unsigned was intended exist in the deployed bytecode/source.
See the full factor methodology and distribution across all protocols →
rubric_version v1.7.0 protocol rocket-pool factor RD-F-018 score green collected_at 2026-05-04 15:40:28