You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: RPIPs/RPIP-use-latest-delegate.md
+17-21Lines changed: 17 additions & 21 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,7 +1,7 @@
1
1
---
2
2
rpip:
3
-
title: Require Minipools to Use Latest Delegate
4
-
description: Require Smartnode update to enforce use of the latest delegate for minipools.
3
+
title: Set Smartnode Default to Use Latest Delegate for Minipools
4
+
description: Update Smartnode so by default minipools use the latest protocol-approved delegate and remove supported Smartnode configuration paths for setting older delegate implementations.
This proposal requires that a future specified Smartnode update enforce the use of the latest delegate smart contract for minipools managed via Smartnode. After upgrading, supported Smartnode configuration would no longer allow minipools to point to older delegate implementations. The intent is to ensure protocol-wide consistency among Smartnode-managed minipools, enable governance-approved minipool behavior changes, and remove technical blockers to future enforcement mechanisms (including, but not limited to, forced exits of persistently underperforming minipools).
16
+
This proposal specifies that a future Smartnode update will by default set minipools managed via Smartnode to use the latest delegate smart contract and remove supported Smartnode configuration options for setting older delegate implementations. The intent is to ensure protocol-wide consistency among Smartnode-managed minipools, enable governance-approved minipool behavior changes, and remove technical blockers to future enforcement mechanisms (including, but not limited to, forced exits of persistently underperforming minipools).
17
17
18
18
## Motivation
19
19
20
20
A non-trivial number of minipools are persistently underperforming, reducing overall rETH yield and harming demand. Reduced rETH demand contributes to difficulties clearing the minipool queue and complicates the protocol’s transition to the Saturn 1 architecture, including megapools, the RPL fee switch, and alternative protocol funding mechanisms.
21
21
22
-
While support efforts to remediate underperforming node operators are ongoing, the protocol currently lacks a reliable enforcement mechanism because minipools may permanently opt out of delegate upgrades. This creates a situation where governance-approved protocol logic cannot be universally applied.
23
-
24
-
This proposal addresses that limitation.
22
+
While support efforts to remediate underperforming node operators are ongoing, the protocol currently lacks an enforcement mechanism because minipools may opt out of delegate upgrades. This creates a situation where governance approved protocol logic cannot be universally applied.
25
23
26
24
## Background
27
25
@@ -46,11 +44,9 @@ Node operators may currently configure each minipool to either:
46
44
- Use the delegate active at the time of creation, then upgrade to future delegates of their choosing, or
47
45
- Use the latest delegate at all times
48
46
49
-
This opt-in upgrade model was originally designed to protect node operators from malicious or unsafe upgrades. However, it also allows minipools to permanently avoid protocol changes approved by governance.
50
-
51
47
### Historical rationale for opt-in delegate upgrades
52
48
53
-
The opt-in `use-latest-delegate` model was originally designed to serve multiple purposes, including:
49
+
The opt-in `use-latest-delegate` model was originally designed to:
54
50
55
51
1. Protect node operators from potentially malicious or unsafe governance upgrades.
56
52
2. Allow minipools to converge on a long-lived (“Lindy”) delegate without mandatory churn.
@@ -62,11 +58,11 @@ This proposal revisits these assumptions in light of changes to Rocket Pool’s
62
58
63
59
### Implementation
64
60
65
-
- A Smartnode update SHALL enforce the use of the latest delegate for minipools. The exact implementation method is left to the Smartnode development team, subject to this specification.
61
+
- A Smartnode update SHALL set by default the use latest delegate flag to true for minipools. The exact implementation method is left to the Smartnode development team, subject to this specification.
66
62
67
-
- The Smartnode update SHOULD be implemented at the earliest reasonable opportunity that does not interfere with the Saturn 1 launch.
63
+
- The Smartnode update SHALL remove supported Smartnode configuration options for setting older delegate implementations.
68
64
69
-
- The Smartnode SHALL prevent users, via supported Smartnode interfaces, from disabling use of the latest delegate.
65
+
- The Smartnode update SHOULD be implemented at the earliest reasonable opportunity that does not interfere with the Saturn 1 launch.
70
66
71
67
### Scope
72
68
@@ -78,6 +74,8 @@ This proposal revisits these assumptions in light of changes to Rocket Pool’s
78
74
79
75
- Does **not** grant any emergency or unilateral powers to the core team or governance bodies beyond existing delegate upgrade mechanisms.
80
76
77
+
- Does **not** prevent an older delegate from being used, it just removes the ability to change the use latest delegate option via Smartnode.
78
+
81
79
### Delegate Update Oversight
82
80
83
81
- Delegate updates that materially affect validator exits, reward distribution, penalties, or governance authority MUST only be implemented following pDAO vetting via vote.
Because minipools can remain indefinitely on older delegate logic, it is difficult or impossible to enforce protocol-wide standards. This limitation does not apply to megapools, which do not use the same delegate opt-in model.
96
-
97
-
This change prioritizes protocol-wide consistency among Smartnode-managed minipools and enforceability over permanent opt-out flexibility. As Rocket Pool scales and transitions to Saturn-era architecture, the inability to uniformly apply protocol logic becomes an increasing risk to rETH holders and protocol sustainability.
98
-
99
-
The delegate upgrade mechanism already exists; this proposal ensures it cannot be indefinitely bypassed.
100
-
101
-
Several original justifications for opt-in delegate upgrades have been partially mitigated over time. Saturn-era governance introduces additional safeguards, including a Security Council veto, reducing the risk of malicious upgrades. Additionally, long governance lead times and explicit votes may serve as a functional replacement for individual opt-out as an exit mechanism.
93
+
Because the previous Smartnode behavior did not set the use latest delegate flag to yes, many Node Operators by default remain on older delegate versions, even if they would be satisfied to be on the most recent deployment. This is an unnecessary obstacle that this proposal corrects. Note that this limitation does not apply to megapools, which do not use the same delegate opt-in model.
102
94
103
95
## Backwards Compatibility
104
96
105
97
- Existing minipools continue operating normally until the node operator updates Smartnode.
106
98
107
99
- No changes are applied to nodes that do not update.
108
100
109
-
- Minipools created after updating Smartnode would automatically follow the enforced delegate behavior.
101
+
- Minipools created after updating Smartnode would automatically follow the default delegate behavior.
110
102
111
103
- Node operators retain the ability to exit minipools prior to upgrading Smartnode, and governance processes are expected to provide sufficient notice before delegate changes that materially affect operator behavior.
112
104
105
+
- Node operators can change delegate versions outside the scope of Smartnode UI and/or commandline interfaces.
106
+
113
107
## Risks and Considerations
114
108
115
109
-**Governance risk concentration:** Delegate upgrades become more powerful and require stronger review processes.
@@ -124,9 +118,11 @@ Several original justifications for opt-in delegate upgrades have been partially
124
118
125
119
-**Loss of Lindy delegate stability:** Forcing delegate upgrades sacrifices the ability for minipools to remain indefinitely on a long-lived delegate implementation. While this may increase upgrade churn, it is a deliberate tradeoff in favor of enforceability and protocol-wide consistency among Smartnode-managed minipools.
126
120
121
+
Several original justifications for opt-in delegate upgrades have been partially mitigated over time. Saturn-era governance introduces additional safeguards, including a Security Council veto, reducing the risk of malicious upgrades. Additionally, long governance lead times and explicit votes may serve as a functional replacement for individual opt-out as an exit mechanism.
122
+
127
123
## Conclusion
128
124
129
-
This proposal represents a significant philosophical shift, but one driven by observed protocol limitations rather than theory. As Rocket Pool evolves, ensuring consistent, enforceable protocol behavior may be necessary to protect rETH holders and support long-term scalability.
125
+
This proposal represents a philosophical shift, but one driven by observed protocol limitations rather than theory. As Rocket Pool evolves, ensuring consistent, enforceable protocol behavior may be necessary to protect rETH holders and support long-term scalability.
0 commit comments