defirisk.co
rubric v1.7.0

UUPS _authorizeUpgrade correctly permissioned

Rocket Pool's assessment for RD-F-021 — scored not_applicable on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

Rocket Pool does not use the OZ UUPS proxy pattern. Upgrade mechanism is a custom storage-registry pattern (RocketStorage). No _authorizeUpgrade function exists in the codebase. Factor is not applicable.

Sources #

  • GitHub
    RocketBase.solRocketBase.sol — custom registry upgrade pattern, no UUPSretrieved 2026-05-04

Methodology #

Determine whether the UUPS implementation defines `_authorizeUpgrade(address)` restricted to owner/admin/timelock (not open to arbitrary callers).

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol rocket-pool factor RD-F-021 score not_applicable collected_at 2026-05-04 15:40:28