Breakage analysis per dependency
Rocket Pool's assessment for RD-F-052 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
oDAO balance failure: rETH:ETH rate freezes; staking rewards stop accruing; users can redeem at stale rate — not immediately harmful but damages LST peg mechanics. oDAO collusion (>51%): rate manipulation capped at 2%/update by RPIP-61 but no cap across successive updates — slow drain risk across multiple intervals. oDAO RPL price failure: incorrect node operator collateral validation (incorrect liquidations or under-collateralized operations). Beacon Deposit Contract failure: new validator registrations halt, existing TVL unaffected. RocketStorage corruption: full system halt. Partial analysis covering major deps without a single formal breakage document = yellow.
Sources #
- URLRocket Pool oDAO permissions analysisnotonlyowner.com: oDAO powers enumeration and collusion attack vector descriptionretrieved 2026-05-04
- Saturn One upgrade notesSaturn One site: 'Saturn introduces constraints on oDAO-submitted balance data, protecting the rETH protocol rate from manipulation or faulty reporting'retrieved 2026-05-04
- RPIP-61 Balance Submission GuardrailRPIP-61: 2% per-update cap on rETH delta; frequency minimum 95% of configured intervalretrieved 2026-05-04
Methodology #
Produce a short per-dependency text describing which protocol functions halt or degrade and impact severity if each declared dependency fails.
See the full factor methodology and distribution across all protocols →