★ Admin has mint() with unlimited max
Rocket Pool's assessment for RD-F-042 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
RPL token inflationMintTokens() is publicly callable (not admin-gated) but controlled by a DAO-set rate. No hard supply cap exists. The inflation rate can be modified by pDAO governance (and guardian bootstrap functions). This is not a direct admin-callable unlimited mint, but the absence of a supply cap and guardian's ability to change the inflation rate via bootstrap functions creates meaningful risk. Saturn One plans to phase out inflation by late 2026.
Sources #
- GitHubRocketTokenRPL.solRocketTokenRPL.sol: inflationMintTokens() publicly callable; no maxSupply; rate DAO-controlledretrieved 2026-05-04
- Rocket Pool Saturn I UpgradeSaturn One fee switch and RPL inflation phase-out by late 2026retrieved 2026-05-04
Methodology #
Determine whether an admin-callable `mint` on a protocol token has no supply cap or an unlimited maximum supply.
See the full factor methodology and distribution across all protocols →