Smart Node: Use Latest Delegate for Minipools
Status: Sentiment Poll - Passed
Discord Discussion: #Require Use Latest Delegate in Smartnode
RPIP Finalized: RPIP-77
Please read before voting
Although this proposal does represent a philosophical shift in how Rocket Pool operates, the language here is softened from the original forum post discussion. Without encouraging bypassing this proposed change, voters should understand it is possible to set the delegate to other versions outside the scope of Smartnode.
Overview
This post is intended to gauge support for a proposal that specifies a future Smart Node update will by default set minipools managed via Smart Node to use the latest delegate smart contract and remove supported Smart Node configuration options for setting older delegate implementations. The intent is to improve protocol-wide consistency among minipools, enable pDAO approved minipool changes, and remove some technical blockers to future enforcement mechanisms (including, but not limited to, forced exits of persistently underperforming minipools).
If sentiment if favorable, the RPIP will proceed to a snapshot vote.
Motivation
A non-trivial number of minipools are persistently underperforming, reducing overall rETH yield and harming demand. Reduced rETH demand complicates the protocol’s transition to the Saturn 1 architecture which includes megapools, the RPL fee switch, and alternative protocol funding mechanisms.
While support efforts to remediate underperforming node operators are ongoing, the protocol currently lacks an enforcement mechanism since, by default, minipools are not set to use the most recent delegate contract and it is easy for minipool operators to opt out of delegate upgrades. This creates a situation where governance approved protocol logic cannot be universally applied. Currently, only 7% of operators have proactively selected to use the latest delegate and many of those who have not are likely not even aware of this option.
Background
Rocket Pool minipools are implemented using a proxy pattern. The minipool contract itself contains minimal logic and instead forwards most calls to a delegate implementation contract (the "delegate”). The delegate controls, among other things:
- Minipool lifecycle and state transitions
- Validator launch conditions
- ETH balance distribution between node operators and rETH holders
- Penalty and slashing logic
- Withdrawal, exit, and finalization behavior
- Bug fixes and protocol rule updates without redeploying minipools
Node operators may currently configure each minipool to either:
- Use the delegate active at the time of creation, then upgrade to future delegates of their choosing, or
- Use the latest delegate at all times
The opt-in model was originally designed to:
- Protect node operators from potentially malicious or unsafe governance upgrades.
- Allow minipools to converge on a long-lived (“Lindy”) delegate without mandatory churn.
- Provide node operators an exit path if they disagreed with protocol changes.
This proposal revisits these assumptions in light of changes to Rocket Pool’s governance and security model.
Proposed Change
- A Smart Node update SHALL set by default the use latest delegate flag to true for minipools.
- The Smart Node update SHALL remove supported Smart Node configuration options for setting older delegate implementations.
- The Smart Node update SHOULD be implemented at the earliest reasonable opportunity that does not interfere with the Saturn 1 launch.
Scope
- Applies only after upgrading to the specified Smart Node version.
- Does not retroactively modify minipools on older Smart Node versions.
- Does not itself implement forced exits; it enables future governance-approved mechanisms.
- Does not grant any emergency or unilateral powers to the core team or governance bodies beyond existing delegate upgrade mechanisms.
- Does not prevent an older delegate from being used, it just removes the ability to change the use latest delegate option via Smart Node.
Delegate Update Oversight
- Delegate updates that materially affect validator exits, reward distribution, penalties, or governance authority MUST only be implemented following pDAO vetting via vote.
Any forced-exit mechanism would require a separate proposal and vote.
Summary
This proposal involves tradeoffs:
Pros
- Improved alignment with pDAO approved changes – eventually including forced exits
- Improved rETH yield competitiveness
- Reduced operational complexity
- Better alignment with Saturn-era architecture
Cons / Risks
- Increased importance of governance process integrity
- Sacrifice of long-lived (“Lindy”) delegate stability
- Partial enforcement until/unless Smart Node upgrades are widely adopted
Note that a knowledgeable and/or determined operator can change delegate outside the Smart Node infrastructure if they so choose.
Poll
Should this proposal proceed to a vote?
- Yes, proceed to vote
- No, do not proceed to vote
- Undecided - comment below
Next Steps
- If sentiment is positive, the RPIP will be finalized and proceed to pDAO vote
- If pDAO vote succeeds, the changes above will be implemented
Final Notes
This proposal reflects a reassessment of earlier design assumptions in light of Rocket Pool’s growth, Saturn-era governance safeguards, and observed protocol limitations. It also takes into account operator reluctance to lose all possibility of delegate choice.