A team member for Lido has accused competitor Rocket Pool of being too centralized in a July 4 social media post. Both Lido and Rocket Pool are liquid staking protocols that allow users to delegate their cryptocurrency to validators and receive derivative tokens in exchange.
According to the post from Lido’s community staking lead Dmitry Gusakov, the Rocket Pool contracts are controlled by the Rocket Pool team, allowing the team to change any parameters and call any method. This means that Rocket Pool developers can increase the inflation rate to an arbitrarily large percentage or increase fees to up to 100%.
Gusakov claimed this vulnerability does not exist in Lido’s contracts, as in Lido, these actions are “fully controlled by [decentralized autonomous organization] LidoDAO.”
Rocket Pool grants management committee member Waq responded to the accusation, stating that the vulnerability was already known to the team and will be fixed in the future. Waq accused the Lido team of trying to take credit for discovering an issue that was already known.
Here we go again with the "brand new" discoveries of @Rocket_Pool being super malicious again Not a single word of how the community has been working for over a year on fixing this and the progress we're making. Once we fix this, they'll rush to take the credit like always.
According to Gusakov’s post, the RocketStorage contract at Ethereum address 0x1d8f8f00cfa6758d7bE78336684788Fb0ee0Fa46 contains a parameter called “guardian.” Many functions in Rocket Pool contracts are also labeled as “onlyGuardian,” meaning they can only be called by the account listed in this parameter, which is currently set to the RocketPool deployer account at 0x0cCF14983364A7735d369879603930Afe10df21e.
Actio
Read more on cointelegraph.com