Skip to content

Commit 3d79b9a

Browse files
make it more clear there are ways to keep using older delegates
1 parent 1726e59 commit 3d79b9a

File tree

1 file changed

+17
-21
lines changed

1 file changed

+17
-21
lines changed

RPIPs/RPIP-use-latest-delegate.md

Lines changed: 17 additions & 21 deletions
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
---
22
rpip:
3-
title: Require Minipools to Use Latest Delegate
4-
description: Require Smartnode update to enforce use of the latest delegate for minipools.
3+
title: Set Smartnode Default to Use Latest Delegate for Minipools
4+
description: Update Smartnode so by default minipools use the latest protocol-approved delegate and remove supported Smartnode configuration paths for setting older delegate implementations.
55
author: Dr Doofus (@DrDoofus-MD-PhD-DDS)
66
discussions-to: https://dao.rocketpool.net/t/require-minipools-to-use-latest-delegate/3844
77
status: Draft
@@ -13,15 +13,13 @@ tags: [minipools, delegate, smartnode]
1313

1414
## Abstract
1515

16-
This proposal requires that a future specified Smartnode update enforce the use of the latest delegate smart contract for minipools managed via Smartnode. After upgrading, supported Smartnode configuration would no longer allow minipools to point to older delegate implementations. The intent is to ensure protocol-wide consistency among Smartnode-managed minipools, enable governance-approved minipool behavior changes, and remove technical blockers to future enforcement mechanisms (including, but not limited to, forced exits of persistently underperforming minipools).
16+
This proposal specifies that a future Smartnode update will by default set minipools managed via Smartnode to use the latest delegate smart contract and remove supported Smartnode configuration options for setting older delegate implementations. The intent is to ensure protocol-wide consistency among Smartnode-managed minipools, enable governance-approved minipool behavior changes, and remove technical blockers to future enforcement mechanisms (including, but not limited to, forced exits of persistently underperforming minipools).
1717

1818
## Motivation
1919

2020
A non-trivial number of minipools are persistently underperforming, reducing overall rETH yield and harming demand. Reduced rETH demand contributes to difficulties clearing the minipool queue and complicates the protocol’s transition to the Saturn 1 architecture, including megapools, the RPL fee switch, and alternative protocol funding mechanisms.
2121

22-
While support efforts to remediate underperforming node operators are ongoing, the protocol currently lacks a reliable enforcement mechanism because minipools may permanently opt out of delegate upgrades. This creates a situation where governance-approved protocol logic cannot be universally applied.
23-
24-
This proposal addresses that limitation.
22+
While support efforts to remediate underperforming node operators are ongoing, the protocol currently lacks an enforcement mechanism because minipools may opt out of delegate upgrades. This creates a situation where governance approved protocol logic cannot be universally applied.
2523

2624
## Background
2725

@@ -46,11 +44,9 @@ Node operators may currently configure each minipool to either:
4644
- Use the delegate active at the time of creation, then upgrade to future delegates of their choosing, or
4745
- Use the latest delegate at all times
4846

49-
This opt-in upgrade model was originally designed to protect node operators from malicious or unsafe upgrades. However, it also allows minipools to permanently avoid protocol changes approved by governance.
50-
5147
### Historical rationale for opt-in delegate upgrades
5248

53-
The opt-in `use-latest-delegate` model was originally designed to serve multiple purposes, including:
49+
The opt-in `use-latest-delegate` model was originally designed to:
5450

5551
1. Protect node operators from potentially malicious or unsafe governance upgrades.
5652
2. Allow minipools to converge on a long-lived (“Lindy”) delegate without mandatory churn.
@@ -62,11 +58,11 @@ This proposal revisits these assumptions in light of changes to Rocket Pool’s
6258

6359
### Implementation
6460

65-
- A Smartnode update SHALL enforce the use of the latest delegate for minipools. The exact implementation method is left to the Smartnode development team, subject to this specification.
61+
- A Smartnode update SHALL set by default the use latest delegate flag to true for minipools. The exact implementation method is left to the Smartnode development team, subject to this specification.
6662

67-
- The Smartnode update SHOULD be implemented at the earliest reasonable opportunity that does not interfere with the Saturn 1 launch.
63+
- The Smartnode update SHALL remove supported Smartnode configuration options for setting older delegate implementations.
6864

69-
- The Smartnode SHALL prevent users, via supported Smartnode interfaces, from disabling use of the latest delegate.
65+
- The Smartnode update SHOULD be implemented at the earliest reasonable opportunity that does not interfere with the Saturn 1 launch.
7066

7167
### Scope
7268

@@ -78,6 +74,8 @@ This proposal revisits these assumptions in light of changes to Rocket Pool’s
7874

7975
- Does **not** grant any emergency or unilateral powers to the core team or governance bodies beyond existing delegate upgrade mechanisms.
8076

77+
- Does **not** prevent an older delegate from being used, it just removes the ability to change the use latest delegate option via Smartnode.
78+
8179
### Delegate Update Oversight
8280

8381
- Delegate updates that materially affect validator exits, reward distribution, penalties, or governance authority MUST only be implemented following pDAO vetting via vote.
@@ -92,24 +90,20 @@ Persistently underperforming minipools impose systemic costs:
9290
- Delayed or constrained Saturn 1 rollout
9391
- Reduced protocol revenue options (e.g., RPL fee switch, institutional incentives)
9492

95-
Because minipools can remain indefinitely on older delegate logic, it is difficult or impossible to enforce protocol-wide standards. This limitation does not apply to megapools, which do not use the same delegate opt-in model.
96-
97-
This change prioritizes protocol-wide consistency among Smartnode-managed minipools and enforceability over permanent opt-out flexibility. As Rocket Pool scales and transitions to Saturn-era architecture, the inability to uniformly apply protocol logic becomes an increasing risk to rETH holders and protocol sustainability.
98-
99-
The delegate upgrade mechanism already exists; this proposal ensures it cannot be indefinitely bypassed.
100-
101-
Several original justifications for opt-in delegate upgrades have been partially mitigated over time. Saturn-era governance introduces additional safeguards, including a Security Council veto, reducing the risk of malicious upgrades. Additionally, long governance lead times and explicit votes may serve as a functional replacement for individual opt-out as an exit mechanism.
93+
Because the previous Smartnode behavior did not set the use latest delegate flag to yes, many Node Operators by default remain on older delegate versions, even if they would be satisfied to be on the most recent deployment. This is an unnecessary obstacle that this proposal corrects. Note that this limitation does not apply to megapools, which do not use the same delegate opt-in model.
10294

10395
## Backwards Compatibility
10496

10597
- Existing minipools continue operating normally until the node operator updates Smartnode.
10698

10799
- No changes are applied to nodes that do not update.
108100

109-
- Minipools created after updating Smartnode would automatically follow the enforced delegate behavior.
101+
- Minipools created after updating Smartnode would automatically follow the default delegate behavior.
110102

111103
- Node operators retain the ability to exit minipools prior to upgrading Smartnode, and governance processes are expected to provide sufficient notice before delegate changes that materially affect operator behavior.
112104

105+
- Node operators can change delegate versions outside the scope of Smartnode UI and/or commandline interfaces.
106+
113107
## Risks and Considerations
114108

115109
- **Governance risk concentration:** Delegate upgrades become more powerful and require stronger review processes.
@@ -124,9 +118,11 @@ Several original justifications for opt-in delegate upgrades have been partially
124118

125119
- **Loss of Lindy delegate stability:** Forcing delegate upgrades sacrifices the ability for minipools to remain indefinitely on a long-lived delegate implementation. While this may increase upgrade churn, it is a deliberate tradeoff in favor of enforceability and protocol-wide consistency among Smartnode-managed minipools.
126120

121+
Several original justifications for opt-in delegate upgrades have been partially mitigated over time. Saturn-era governance introduces additional safeguards, including a Security Council veto, reducing the risk of malicious upgrades. Additionally, long governance lead times and explicit votes may serve as a functional replacement for individual opt-out as an exit mechanism.
122+
127123
## Conclusion
128124

129-
This proposal represents a significant philosophical shift, but one driven by observed protocol limitations rather than theory. As Rocket Pool evolves, ensuring consistent, enforceable protocol behavior may be necessary to protect rETH holders and support long-term scalability.
125+
This proposal represents a philosophical shift, but one driven by observed protocol limitations rather than theory. As Rocket Pool evolves, ensuring consistent, enforceable protocol behavior may be necessary to protect rETH holders and support long-term scalability.
130126

131127
## Copyright
132128

0 commit comments

Comments
 (0)