Rocket Pool launch on the back burner after rival uncovers bug
A bug unravels staking provider Lido, delaying the launch of Eth2’s staking service, Rocket Pool.
The postponement had been announced on Oct. 6th as the development team attempts to resolve the bug. In a Tweet from the firm, the team stated that the changes being administered to render the protocol bugless are “relatively minimal” and that a new launch date is in the cards.
Dmitri Tsumak, StakeWise founder, the company’s rival, reported the vulnerability to Rocket Pool, leading the team to notify Lido that it shares the same issue.
Lido acknowledged said bug through a Tweet on Oct. 5, resorting to a proposal to vote to lower staking limits for all node operators in an attempt to minimize the risk. The potential impact of the exploit had been called by the Lido team to be “low”, stating that “the vulnerability can only be exploited by the currently whitelisted Lido node operators.”
The team went on record to say that, “A long-term fix is being developed in parallel and more information will be shared when it is out of a draft stage,”.
StakeWise also went public in their statement, mentioning Tsumak’s role in identifying and reporting the potential exploit to its competitors. The firm said, “Even when dealing with our competitors, the more secure we are collectively, the stronger the entire ETH2 staking ecosystem becomes.”
In another Tweet, Rocket Pool said that it would commit to sharing network security.