defirisk.co
rubric v1.7.0

Rescue/emergencyWithdraw without timelock

Rocket Pool's assessment for RD-F-041 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

No rescue, emergencyWithdraw, sweep, or equivalent function found in RocketVault, RocketTokenRETH, or RocketTokenRPL. RocketVault withdrawals (withdrawEther, withdrawToken) are restricted to onlyLatestNetworkContract — only authorized protocol contracts, not an admin EOA directly. No admin drain path found.

Sources #

  • GitHub
    RocketVault.solRocketVault.sol: no rescue function; withdrawals restricted to onlyLatestNetworkContractretrieved 2026-05-04
  • GitHub
    RocketTokenRETH.solRocketTokenRETH.sol: no rescue or admin withdrawal functionretrieved 2026-05-04

Methodology #

Determine whether a `rescue(…)` or `emergencyWithdraw(…)` function exists callable by admin without a timelock delay on execution.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol rocket-pool factor RD-F-041 score green collected_at 2026-05-04 15:40:28