Rocket Pool Atlas (v1.
Summary
Executive Summary This report presents the results of our engagement with Rocket Pool to review their upcoming Rocket Pool Atlas release (v1.2). The review was conducted over three weeks, from January 16, 2023 to February 03, 2023. A total of 2x15 person-days were spent. A critical reentrancy issue in the node distributor has been found, allowing a node owner to drain funds from the respective distributor. Furthermore, several major severity issues have been found regarding the updated Minipool delegate contract and a node operator DAO contract.
Issues (22)
Low | Medium | High | Critical | Total | |
|---|---|---|---|---|---|
Not fixed | 6 | 6 | 3 | - | 15 |
Fixed | 4 | 1 | 1 | 1 | 7 |
| Total | 10 | 7 | 4 | 1 | 22 |
Contracts (149)
| # | File Name |
|---|---|
| 1 | bdc6324139800c351bb70a0e7f47d5586c95a56e |
| 2 | ec56e4455efe3514697104258c32df13f3372469 |
| 3 | 9145f779f88723787a5fe20a3228058e4fe9186a |
| 4 | a12e8f5594c70b9841097836dc3954ddb97bf02e |
| 5 | 200d56ccab76cc739055597e0af551f4a09add1c |
| 6 | 443a05bb1d24b47f917fd82ccab11edf26275532 |
| 7 | e99e576cbdfd38d8d6e3fbcdd5abd63362f5cc5c |
| 8 | 5527b3f945c2650b7efccbf44eb5f781f3a2e4f7 |
| 9 | 18be22f61a864272b7927d8015404a0a2cc7705c |
| 10 | d4c47c746ef9fbdee7bef9cab11ccc8811478ed2 |