Rocket Pool Security Audit Flags Critical Reentrancy and Access-Control Risks

A security audit covering Rocket Pool, a staking protocol with roughly $1.28 billion in total value locked, examined its v1.3.0 contracts and L2 adapters between October 1 and 15, 2024. The review identified 10 findings, including one critical reentrancy issue in the minipool withdrawal path that could let an attacker drain a minipool's balance. Auditors also reported over-privileged admin functions that a compromised DAO executor could exploit. The protocol received an overall risk score of 7.4 out of 10, rated as high. The report recommends specific code-level remediations for each identified vulnerability.