Just Exit My Validators
General Information
What is the nature of the proposed bounty?
A project that allows node operators to exit their validators with just the mnemonic.
Why are you writing this bounty proposal?
Often, node operators appear in #support with some variant of the following question:
Hello, my node has spontaneously combusted. I cannot access it but would like to get my funds out. How can I do this?
Currently, the answer is often “uh, find some way to sign the voluntary exit message using ethdo and then broadcast it via beaconcha.in…”
This bounty would pay someone to develop (potentially just) a wrapper around ethdo and the beaconcha.in v1 message broadcast API which provides a UI that can be securely hosted, or downloaded and runs locally, and makes it easy to exit any validator from a mnemonic without having access to a node.
There isn’t a good alternative that I know of, and as RP uses the standard logic to derive the validator keys, this tool trivially can support the solo staking community as well.
This tool must support the standard wallet format as well as mnemonics, so it will work for AllNodes users.
The tool should support an optional beaconcha.in API key (to avoid ip-based rate limiting on their unauthenticated endpoints).
NB: beaconcha.in is in the process of upgrading to their v2 api which does not yet support broadcasting messages. A portion of this bounty will only be paid out once the tool supports their new API.
Benefit
| Group | Benefits |
|---|---|
| Potential rETH holders | N/A |
| rETH holders | N/A |
| Potential NOs | Confidence that they can exit even if their node breaks |
| NOs | They can exit even if their node breaks |
| Community | N/A |
| RPL holders | N/A |
Which other non-RPL protocols, DAOs, projects, or individuals would stand to benefit from the bounty being successfully completed?
Solo stakers, or really any protocol whose validator keys are compatible.
Work
What steps would be entailed in completing the bounty? Do successful examples of such work exist elsewhere? What skillsets or knowledge will be required?
Frontend development experience is necessary. Potentially to the point where a website with only client-side code is capable of deriving keys, signing a voluntary exit message, and pushing it to the beaconcha.in api to broadcast it. Ideally, the code can also use the beaconcha.in API to check the derived keys for presence on the beaconchain.
What advice would you give a bounty hunter working on this bounty?
Security is genuinely important. Code quality is genuinely important. The tool needs to be verifiably trustworthy.
Should the output of this bounty be available under an open source license?
Absofuckinglutely
Costs
How much do you think the completion of this bounty worth to Rocket Pool (in USD)?
$5,000.00 for its creation and the creation of thorough documentation.
$1,000.00 bump after the beaconcha.in v2 api supports message broadcasts and the tool is updated to use it.
How much work will be needed to verify this bounty has been completed? What skillsets or knowledge will be required?
Auditing the code for security and trustworthiness (multiple people). Will require advanced software engineering knowledge (to look for underhanded exploits).
Structure
How would you structure this bounty, and why?
$5,000.00 for its creation and the creation of thorough documentation.
$1,000.00 bump after the beaconcha.in v2 api supports message broadcasts and the tool is updated to use it.
Is this bounty repeatable?
No.
Are there any reasonable circumstances under which this bounty should be withdrawn? Should it expire?
If a competing tool arises that fulfills its requirements.
Conflicts of Interest
Does the person or persons proposing the bounty have any conflicts of interest to disclose? (Please disclose here if you are a member of the GMC or if any member of the GMC would benefit directly financially from the successful completion of the bounty).
I am a investor in nodeset, beaconcha.in, and sit on the board of directors of ethstaker.
Will the applicant, or any protocol or project in which the applicant has a vested interest (other than Rocket Pool), benefit financially if the bounty is successfully completed?
Solo stakers will benefit, as will anyone with validators through any protocol who needs an easy escape hatch.