Disclosure: I am paid a small weekly stipend as Rocket Pool Community Advocate by the Rocket Pool core team and hold a considerable sum of RPL tokens that have been gifted to me over the past few years in support of my contributions. I have a small allocation of both LDO and SWISE tokens.
I would like to give a special thanks to silvv.eth and Nick Ashley for reviewing and editing this paper with me. Picture credits to sleety.eth. A further thanks to all those in the Rocket Pool community who have contributed to this document, whether by providing writing input or by contributing towards something mentioned.
1 - Power is not Law
The Pareto principle, also known as the power law, is a phenomenon that occurs when a small number of individuals or groups control a disproportionate amount of a resource or outcome. This can be seen in many different fields, including economics, sociology, and ecology. For example, the global distribution of wealth is often described using the Pareto principle.
The Pareto principle was the foundation of a now-famous research paper from Hasu and Georgios of Paradigm, a Web3 investment firm. Writing about the nature of liquid staking, they argued that Ethereum’s proof-of-stake (PoS) system would be dominated by pools that were socially scalable and delivered the highest possible returns by accepting MEV (Maximal Extractable Value). They argued that a Pareto distribution would result whereby most staked ETH would be controlled either by a centralized exchange, or a less-centralized alternative that could launch first. As the first mover, this entity would have the most time in the market and therefore seem most trustworthy, prima facie. This is popularly referred to as the Lindy effect, with its growing time in the market translating to increased investor trust. Another advantage of being early is that liquidity tends to beget liquidity - liquidity is a lifeblood for protocols, being all the more critical for any liquid staking endeavor as the name suggests. The authors would go on to help found Lido, a protocol that now holds an oppressive ~90% of the Ethereum Liquid Staking Derivative (LSD) token market cap used in DeFi, much higher than the power law might suggest is natural.
The Pareto principle only holds true in the presence of some environmental limiting pressure that prevents total ecosystem domination. For example, in a biological ecosystem, the balance between predator and prey populations can keep both populations in check. However, if there is an artificial disruption, such as hunting or the introduction of a non-native species, the ecosystem can collapse.
The claim that PoS ETH is already in a power law distribution often skips an important component--the limiting pressure. One can see this limiting pressure exemplified through the growth phases of a wild animal population as modeled by the logistic curve. In the first phase, exponential growth quickly brings the population to an extreme from essentially zero. In the middle of the curve, growth reaches an inflection point and slows as some pressure begins to mount. For predatory species, this may be decreasing food rations from over-predation. The final part of the curve is the approach towards carrying capacity – an asymptotic relationship for the population’s ceiling wherein risk or lack of food inhibits any further growth. Here the species holds a dominant, yet fluctuating, grasp on the ecosystem. Further growth is repudiated as it would diminish resources causing population collapse, which in turn would boost reproduction as resources become plentiful again -- a constant cycle around the steady state. Now, imagine if the counter force could be suppressed or hidden. What would happen to the bacteria population? It would consume with no end.
The Monopolist Playbook
I posit that Lido has been artificially suppressing power law dynamics to maintain an unsustainably high proportion of the Ethereum LSD market. The long-term effects of this behavior are simple and inevitable – as the seemingly endless liquidity incentives dry up and the DeFi integration gap lessens, the market’s invisible hand will drive reversion towards a Pareto distribution. The outright dominance of Lido’s LSD token (stETH) should drop as rational actors diversify risk.
Much as the US Federal Reserve printed billions of dollars in response to the Covid-19 pandemic, Lido has been rapidly inflating and spraying their governance token (LDO), to the tune of tens of millions of dollars per month. By paying to elevate the utility of their stETH LSD, Lido has been attempting to entrench the first-mover advantages outlined in Hasu and Georgios’ paper. Retail investors, therefore, face a prisoner’s dilemma, with self-interested and profit-chasing actors seeking out stETH’s boosted value despite inherent risks being obscured beneath a flood of LDO incentive payments. Lido’s mask briefly slipped during the 3AC (Three Arrows Capital) collapse in June 2022 when stETH rapidly attracted a risk discount of as much as -6.6% compared to liquid ETH, representing around 18 months of rewards temporarily wiped out. To understand how the materialization of risk through this discount is a symptom of Lido losing its place as the current power law majority player, we have to consider the social and economic headwinds acting against Lido’s relentless quest for total market dominance. I will then describe how Rocket Pool can scale to challenge Lido in a technical sense. This scaling will occur in three distinct phases – pre-withdrawals, withdrawals, and post-withdrawals. Afterward, I will discuss the competitors that may complicate or hasten the process of rETH flipping stETH, focusing on cbETH, frxETH, and osETH.
2 - Social Headwinds to stETH Growth
Hasu and Georgios lay out the social arguments themselves:
“One metric that matters for PoS security is how much of the stake is controlled by a single entity. For [centralized] exchanges 15-30%; at more than that, there might be social concerns about power centralization in the Ethereum ecosystem. A decentralized staking pool can control any share of the network, as long as each individual validator in the DAO is not too big and as long as the withdrawal credentials cannot change / be voted on.
We have to emphasize how important it is that the decentralized staking pool by that point has shed all of its governance functionality. Neither fees, nor withdrawal addresses, nor the validator registry can be allowed to be changed by human inputs.”
Italics are not my own, but the emphasis is. In this section, the authors suggest that social limits placed on centralized exchanges may not apply to a decentralized protocol that meets the requisite governance criteria. It is Lido’s failure to meet these very criteria that is actively creating resistance to the protocol’s continued growth and dominance.
Lido cannot have it both ways. They cannot grow like a centralized entity but claim to be a decentralized one.
Lido now sits at >30% of the network, bigger than the 3 largest centralized exchanges combined, and is still bathed in governance. It seems that, despite their important emphasis two years prior, Hasu and Georgios have now conveniently forgotten gov minimization was a core part of their 2020 paper. In contrast to Lido’s ferocious appetite for growth, steps to “shed all of its governance functionality” have been conspicuously lackluster. An updated dual-governance structure gives voting power to LDO holders and a secondary veto power to stETH holders. But if anything this acts as a distraction to the fact that there have been no real steps taken to diminish Lido’s governance - something that has understandably drawn the ire of some of Ethereum’s influential core developers.
The powers that be have been slow to change and give up control. Should individuals within this group become corrupted, they could affect significant negative changes to the core Lido protocol which would then spill over to infect the wider Ethereum ecosystem.
One example would be misusing Lido’s outsized control of the Ethereum network for added value extraction, namely through multi-block MEV or reorg attacks. There is already a precedent that these legal but immoral actions are not taboo for a purely profit-driven Ethereum organization, as F2Pool has been known for small-scale attacks on blockchain consensus to increase their own profits. If Lido compels their hand-picked validators to implement these immoral value extraction methods at scale, the credible neutrality of Ethereum itself becomes challenged. This threat of cartel-ization is exactly why Hasu and Georgios placed great emphasis on stating that any protocol with governance control should have a hard upper ceiling on their market share.
Reviewing a different liquid staking protocol helps to provide some interesting contrast in governance. Eschewing a tightly controlled and centralized structure, Rocket Pool operates through rough consensus between different groups of stakeholders. Overall protocol direction is driven by a DAO of node operators (the pDAO), with changes then worked on by a team of core developers.
The core dev team has demonstrated its fierce alignment to the core ethos of Ethereum in numerous ways. First, the team was willing to completely restart work when the Ethereum core developers changed the staking contract from Casper in late 2018. Further, the team published a statement of intent to implement a self-imposed cap on Rocket Pool’s market share.
Actual implementation is controlled by a second, external DAO (the oDAO), which operates at arm’s length to review and action protocol upgrades. The oDAO is composed of major parties from across the breadth of the Ethereum ecosystem and are strongly aligned by a combination of three ties: a financial bond, considerable social capital, and a natural alignment with the core principles of Ethereum.
The quadratic voting power of individuals within the pDAO is linked to both their validator count and a capped amount of the RPL utility token. This means that individuals gain voting power by participating in the network and staking a certain amount of the RPL token, rather than simply by holding a large quantity of LDO tokens as in Lido's governance structure. This makes Rocket Pool's governance more robust and less susceptible to manipulation by a small group of individuals.
This multi-party governance system provides anti-fragility in the face of attacks. In fact, it mirrors the rough consensus that Ethereum itself follows wherein multiple different parties signal towards the core developers, but no single party could do so in isolation. Rocket Pool’s governance is still nascent, but its methodical and deliberate progress down the pathway toward full decentralization ensures that the protocol is less likely to fall victim to a social attack.
Rapidly Changing Fee/Incentive Structures
One of the governance red flags raised by Hasu & Georgios that should lead a protocol like Lido to self-cap is that “Fees… [should not] be allowed to be changed by human inputs.” Contrary to this stance, not only can Lido’s fees be changed, but they are actively being adjusted. While the protocol’s top-line 10% commission rate is steady, the flow of these funds has recently been redirected away from insurance towards a more generic treasury for other uses such as marketing. The fact that LDO token holders voted in this change to arguably strengthen their position while putting stETH holders at heightened risk raises questions about how effective Lido’s governance really is. The ability for Lido’s entire insurance profile to change based on a vote decided by a core group of founders is a distinct weakness.
A related issue is the general infancy of on-chain governance. DeFi tokens act as voting shares without any of the information rights those shares would have afforded to their owner in the traditional finance world. As such, the information asymmetry between those with the most to gain from governance (VCs, other protocols) and those who have the best interests of the protocol at heart (founders, active community members) will result in occasional exploitative governance votes.
Dragonfly, a VC firm, attempted to pass a highly controversial vote to sell LDO from the Lido treasury to itself. Due to a strong social response, this vote failed; however, DAOs cannot rely on someone sounding the alarm every time a vote is secretly malicious. The web of governance is broad and all aspects of the Lido protocol are indirectly affected by each other. As long as the flows of capital remain flexible, the protocol will continue to be the focus of governance exploitation.
Lido’s small group of 30 carefully selected validator companies can be very quick to respond to protocol changes, including unfavorable changes, leaving stETH holders with little time to react. Rocket Pool, by comparison, has a large set of node operators running validators. A benefit of this structure is that any attempt to change the flow of incentives will be slowed by gradual adoption. Take for example the future change to lower ETH collateral in mini pools. Because hundreds of operators will each have to make the decision to upgrade, this process will occur gradually, such that rETH holders can respond. With a set of only ~30 operators, coordinating changes that would change the flow of capital in Lido would occur much faster.
The Multichain Dilemma
One of the claimed advantages of a permissioned set of corporations running most of Ethereum’s validators is that for-profit enterprises will be more dedicated than home stakers.
Lido’s CTO recently went so far as to claim that “[home stakers] who run nodes for fun will drop them…when it’s no longer fun…If your business [and] career depends on blockchains, you tend to be thoughtful and committed”.
However, the elephant in the room is that many of Lido’s professional validators are providing their services to multiple different chains concurrently. This glaring conflict of interest calls into question just how committed Lido really is to Ethereum.
In the case of a widespread technical disruption event that knocks multiple validators offline across multiple chains, it’s unlikely that any professional operator would have sufficient staff resources available to restart all chains simultaneously. An incident in September saw 7,390 of Lido’s Ethereum validators operated by BridgeTower Capital go offline for over eight hours following the pre-planned Bellatrix hard-fork. If response times were so slow for a pre-planned event on a single chain, think how many more hours or even days it would have taken them to recover from a real crisis, and at what cost to their liquid stakers. It also raises the risk of a more profit-focused or centralized blockchain such as Solana offering monetary incentives for prioritized crisis handling. This is akin to a fire department being bribed to respond to fires in one specific neighborhood while the whole city is ablaze. By comparison, the technical difficulties of staking as an individual means that home stakers are far more likely to be dedicated to a single chain.
But it can get even worse. In a true doomsday scenario where multiple blockchains halt and require a restart, a high degree of coordination is required between the validators. Attempting to do this for a single blockchain is difficult enough, but managing several at once would be all but impossible.
Further, the negative effects of multichain validation extend to everyday scenarios too. Every chain a professional validator is responsible for has its own incentive structure. New incentives could be misaligned with old ones or vice versa. For example, becoming the majority validator in two competing chains and causing the smaller chain to fail or underperform is a concern for more centralized, smaller Cosmos chains. As Lido continues to expand across chains with no guiding principles, users must begin to question how aligned Lido is with Ethereum. Meanwhile, Rocket Pool serves only Ethereum, though users are free to run other validators on their hardware.
Another one of Hasu & Georgios’ governance red flags that Lido exhibits is that Lido’s “validator registry can be … changed by human inputs.” Despite the warning, Lido’s validator registry remains both fully centralized and opaque. It is not a stretch to imagine the possible corruption of Lido’s DAO members for personal gain. Examples might include requiring validators to conduct immoral value extraction at scale or succumbing to pressure to censor transactions. Despite the glaring security risks this poses, there remains no plan for Lido to extricate humans from this onboarding process. In contrast, Rocket Pool remains the only staking service that provides permissionless onboarding for node operators. Anyone can be a node operator for Rocket Pool, thus the protocol is immune to these centralization risks.
For these social reasons, the broad Ethereum ecosystem has exhibited an increasing pushback to Lido’s dominance. Future investors will be very keen on social risks as DAOs gain power and Lido presents an unparalleled risk.
At this point, I would like to step back and make a meta point. Even if an individual disagreed with me that Rocket Pool is superior to Lido in governance resilience broadly as measured through these social vectors, the disparity in market share is unjustified. An individual who valued social risk very highly would have a roughly 50/50 split of rETH and stETH to mitigate risk. The issues of social pressure are most relevant for the market leader. As such, if I am correct about social issues, then rETH has incredible tailwinds, and if I am (moderately) wrong then rETH still has large tailwinds.
I would argue that while these social factors are significant, they are still ancillary to economic forces. While the online narrative for Lido soured, the 3AC capitulation and ensuing mass stETH liquidation cascade presented, for seemingly the first time, a new element to the stETH market – risk.
3 - Economic Headwinds to stETH Growth
Many retail investors have been lulled into viewing Lido’s stETH LSD token as always redeemable for ETH due to the vast liquidity reserves and the token’s history of staying on-peg. As often happens in such cases, this perception was exploited, leading to the price of overleveraged stETH collapsing by as much as -6.6% vs peg. While priced at peg, it takes a significant force to overcome a token’s inertia and cause this kind of drop - in this case the 3AC bankruptcy - but this same inertia means that a return to stability is not guaranteed and can only be accomplished through significant effort.
Staking––Risk Free or Risk Fee?
The various different LSD tokens fluctuate around their peg or reference price. The largest and most persistent discount vs peg is for Coinbase’s cbETH, followed by stETH, and the smallest is Rocket Pool’s rETH, which has consistently traded at a premium since the merge. The persistent stETH depeg can be traced back to the fact that hundreds of thousands of tokens were minted on leverage and subsequently dumped on secondary markets which depressed the price. Because every stETH minted on leverage is just as eligible to be redeemed for ETH, Lido is loosely engaging in fractional reserve banking by facilitating the creation of many more deposit receipts than there are deposits.
Nansen analysis of stETH’s -6.6% depeg event during the 3AC capitulation revealed that most sales came from large wallets whereas buying pressure came from smaller retail investors. Thus, stETH’s price deviation from peg represents the risk discount or perceived likelihood of a bank run on Lido’s ETH deposits from small retail. Thus, the price at which retail became willing to buy up stETH is an accurate reflection of the risk the market associated with stETH.
Looking at it from the other side, anyone buying stETH shortly before the collapse would have seen around 18 months of allegedly low-risk rewards wiped out in a matter of days - it is important not to undersell how big this depeg is. During this event there were clearly very few individuals who perceived stETH to be a risk-free wrapper on future ETH redemption.
It’s worth noting that rETH also de-pegged at the same time, but to a much lesser extent, and also exhibited a quicker recovery. The APR in ETH staking is lower than other avenues in DeFi and as such the losses are more painful as they are much harder to earn back. In such a capital-intensive, low-yield environment, having proper risk management is crucial. Fortunately, the market has more or less priced all the LSD tokens as a function of perceived risk through their degree of ‘de-peg.’ From this pricing information, we can draw conclusions about LSD token risk.
One naturally comes to ask, where does this risk come from? It can be grouped into three main categories: execution risk, tail risk, and centralization risk. I will show that Lido is at dangerously high-risk levels in the latter two categories and that this is calculable by comparing execution risks between tokens.
I define execution risk as existential threats to a protocol that stem from necessary future upgrades.
Some marginal risk between tokens can be allocated to individual protocols themselves and would largely be correlated with the extensiveness and complexity of the respective smart contracts. Upgrades to Ethereum itself also fall into this category and hence would apply equally to all LSD protocols since they are similarly at risk of a failed hard fork, for example. The successful completion of The Merge demonstrated the role of execution risk. Following The Merge, the stETH depeg dropped to 1% and rETH hit parity. It can be inferred then that a large part of the remaining depeg is now due to centralization risk and tail risk.
Next up, tail risk refers to a range of potential governance abuses and events that may occur on or off-chain, such as smart contract exploits, slashings, quadratic leaks, hardware failures, and custody errors. These events are difficult to predict and occur infrequently but are important to consider in risk management due to their potential severity. Furthermore, the resilience of an antifragile DeFi primitive, like wETH, should be measured by its ability to withstand its worst-case scenario.
In the Ethereum ecosystem, node operator penalty events such as offline losses and slashings scale with the number of validators involved. Each of Lido's node operator companies manages thousands of validators. As a result, there is a higher protocol-wide tail risk exposure when compared to a more decentralized set of operators each running a smaller number of validators. In other words, Lido is placing a large number of eggs in a small number of baskets.
Additionally, Lido does not have sufficient insurance to cover worst-case scenarios and has even begun redirecting funds away from its small protection fund of around 5,000 ETH. If losses exceed this amount, they would be socialized across all stETH holders. In contrast, other LSDs such as rETH and sETH2 have a much higher degree of protection, though only rETH offers true tail risk protection through a large amount of over-collateralization. For a proper comparison of how different LSD tokens provide insurance, see this analysis by dabdab.
To make matters worse for Lido, there is no short-term path to solve the substantial dependence on early Lido node operators. The BridgeTower Capital incident mentioned earlier demonstrates that Lido operators are protected even when they perform poorly. The staked ETH that these operators manage cannot currently be withdrawn. Mitigating this risk through diversification by onboarding additional node operators is not possible, since it only leads to an increase of the third and final category: centralization risk.
While the above two categories are bad enough for Lido itself, any event occurring within what should be a DeFi primitive has the potential to be realized as considerably worse, with its effects cascading through the entire industry built on top. This is an example of centralization risk, the idea that execution and tail risks have a greater impact as the size of any protocol grows.
Since Lido has refused to self-cap at any size, it could one day hold a supermajority of staked ETH. Any failure within Lido would therefore spill over and affect the entire Ethereum ecosystem. This risk should manifest in higher sell pressure as Lido’s market dominance rises. Even if governance risks are resolved, the mere appearance of a risky supermajority from Lido could still generate this kind of sell pressure. In times of risk-off or volatile market conditions, the widening gaps between stETH and other lower-risk assets such as rETH represent a “flight to safety” with the market pricing in the potential adverse scenarios that could befall Lido.
Sitting at just over 30% of all validators and 75% of all liquid-staked ETH, stETH is an order of magnitude larger than rETH at 1.5% of all validators and 5% of liquid-staked ETH. Though Lido does not yet have a supermajority of all ETH, they have voted against self-capping and have maintained an exceptional, perhaps unnatural, lead.
To recap, rETH has considerably less execution, tail, and centralization risk than stETH as demonstrated by the consistent premium rETH demands over stETH. In terms of execution risk, Rocket Pool handled the Merge well while one of Lido’s major node operators experienced significant downtime. With the highly complex Merge complete, the impact of future upgrades is likely to be minimal and so the relevance of execution risk is also minimal. However, Lido still faces marginally greater execution risk in that the concentration of validators means that any mistake will be more costly, as noted by the BridgeTower incident.
In terms of tail risk, rETH is vastly more insured than stETH with all deposits currently >100% overcollateralized. This will protect against almost any severity of slashing, short of an ecosystem-wide failure. Thus, it is unlikely rETH holders will ever be hit. Further, upgrades in the Rocket Pool Smart Node are opt-in and so propagation throughout the system is gradual enough for risk-averse operators to wait for any bugs to appear. This also means that Rocket Pool nodes can run without any upgrades from the core team indefinitely. However, the oracle DAO does represent a source of centralization within the protocol. If the oracle DAO was compromised, massive damage could befall rETH as oracle data is manipulated. Such an attack would require either the coordination or compromise of a majority of the public, doxxed, Ethereum-aligned participants of the oDAO. I will elaborate on this in the Reflections of a Rocketeer section.
Lastly, in terms of centralization risk, rETH is a minor player in the ecosystem and the dev team as well as the community have already signaled support for capping stake. When mitigating risk, rETH is the clear front-runner for LSDs. As such, the only puzzle that remains is how to scale Rocket Pool in a technical sense to meet the demand of being a core DeFi asset. I call this process the Orange Cascade.
4 - The Orange Cascade
I will now discuss how stETH’s market share can drop from being a near monopoly to less than a majority. I begin by recapping the social and economic pressures pushing against stETH and providing tailwinds for rETH. Then, I elaborate on the factors that will allow rETH to scale prior to withdrawals. These factors are mainly ways to scale and improve the experience for node operators, including reducing the ETH bond, the MEV Smoothing Pool, the Rescue Node, and Rocketarb. Looking to the future, I discuss withdrawals and the importance of solo staker migration, the flight from stETH/cbETH, and liquidity migration. By this point, rETH should scale into the low millions ETH staked. However, the future after withdrawals will be even brighter due to native staking-as-a-service (StaaS), Eigenlayer, forced exits, and distributed validator technology (DVT). These technical assets will allow rETH, the healthiest LSD for Ethereum, to onboard the ideal 22% of all staked ETH, no matter what the total percent of ETH staked is.
The Orange Creep - Pre-Withdrawals
The researchers at Paradigm suggested that the first socially scalable and pro-MEV LSD could quickly attract the Lindy effect and dominate in a power-law distributed fashion. I suggested that Lido’s growth has been too aggressive such that what should have been a power-law field had become a single-player market with stETH at a dominant >90% of LSD market cap in DeFi. There has been a growing resistance to this stETH dominance both socially and economically. Ultimately, most ETH remains unstaked and more funds are expected to enter in the months ahead. With greater awareness of risk in the market compared to the heady days of 2021, a much more stringent eye will be placed on tail risk scenarios.
With stETH’s inflexible and inadequate insurance already being siphoned off towards generic ‘treasury’ uses, Lido will find itself unable to safely scale further. It may be the case that stETH has hit its relative peak already. In terms of social barriers to growth, Lido is overly governance dependent with corruptible human-appointed whitelists. Economically, the crashing liquidation cascade and lasting depeg in June demonstrated how stETH in fact has significantly larger centralization and slashing risks relative to other LSDs.
A single major slashing event at any one of Lido’s node operators will permanently reduce trust in the system–since across large time scales, this becomes a question of when not if, will large investors will be willing to play ball? There is already proof that shaken confidence in wider markets can lead to years worth of yield being wiped away. How much worse would the impact be of a Lido-specific incident? What would the reaction be to mass stETH rebalance towards the red? It may be necessary for the ecosystem to learn this lesson the hard way through a major slashing event, but the pressure remains regardless.
Even as Lido tries to increase stETH's LSD dominance through distorted incentives, better alternatives provided by competitors could very well see the market settle back into a traditional Pareto distribution.
Rocket Pool is already the most tail risk resilient, socially scalable, and MEV friendly decentralized LSD protocol. It makes sense for it to be the one that benefits most. The pre-withdrawal era will also be marked by the 8ETH collateral reduction (LEB8s) and quality of life upgrades, the former reducing collateral requirements to 8 ETH per minipool and the latter providing unique ways by which Rocket Pool provides the best experience for node operators.
The supply multiplier on LEB8s is sufficient to triple the rETH supply alone. Each set of 16 node operator ETH will produce 48 rETH, whereas previously it would only produce 16 rETH. However, the real significance lies in the fact that it lowers the barrier to entry. Many more people will be willing to bond 8 ETH than 16 ETH, so despite a floor projection of a 3x increase, we can expect even more growth.
During this time period, there will be a proliferation of quality-of-life improvements, such as the MEV Smoothing Pool (the only way for small node operators to get equal EV to large operators), the Rescue Node, and Rocketarb. Collectively, these exclusive features will draw node operators to Rocket Pool and expand the rETH supply. The MEV Smoothing Pool is an opt-in system where each node operator shares MEV + tips with each other. This gives all participants a much higher chance of getting exposure to long-tail MEV which can often make up a huge portion of returns. An analysis was provided by Ken Smith of the Rocket Pool community here:
With hundreds of node operators participating, it is a powerful entity in its own right that makes joining profitable for other large entities. This in turn will draw larger players into the ecosystem and expand rETH supply.
The Rescue Node is a community-led project that would allow any Rocket Pool node operator to take advantage of a secondary beacon node as a fallback. This can be useful during pruning or minor outages. Normally, this would be very tricky and costly to set up as it is an exceptional amount of redundancy, but the Rocket Pool network will soon provide this to all node operators in the network for no additional cost. There are currently some trust assumptions between users and the Rescue Node maintainers, however, the maintainers are all publicly known. Further, rate limits are in place so that users cannot overly depend on the Rescue Node as a centralizing delegate node.
The direct result of the Rescue Node is that the performance of the protocol overall will markedly increase. There will be fewer instances of user downtime, resulting in higher rewards for rETH. Further, downtime can be very daunting to new node operators. The presence of the Rescue Node makes Rocket Pool a much more forgiving learning environment without sacrificing performance. Even for experienced users, it is a huge QoL benefit knowing that any downtime, planned or not, may no longer have to correspond to lost income. Most importantly, making node operation more accessible for users of the Rocket Pool ecosystem will attract new members and grow the TVL.
Lastly, Rocketarb is a way to profit off of the open market premium that rETH currently enjoys. The supply of rETH is limited by node operators and the deposit pool is full at 5k ETH. When a new mini pool is launched, 16 ETH worth of rETH becomes mintable at the native asset value. If you manage to mint that 16 ETH worth, you can pocket a 16 x 2-3% profit, or 0.3-0.45 ETH. The Rocketarb contract bundles mini pool creation with the rETH minting and sale so that the node operator is left with a mini pool and a lovely bonus for expanding the rETH supply.
This contract creates an incentive to spin up more rETH when there is more demand for the product, which previously did not exist. The opaque value that is generated by excess demand on the open market can now be captured by the protocol as an incentive to grow in a healthy way. Therefore, when stETH holders flee to rETH, as has happened many times before, there is now a way to capture that in the form of TVL growth without any inflationary incentives.
Rocketarb is also a glimpse into the future. After withdrawals, arbing LSDs to restore them to peg will be a very profitable business. The incredible work of the Rocket Pool community has simply found a way to get that benefit before withdrawals are live.
To draw parallels to another Web3 power struggle, Sushiswap was never able to flip Uniswap despite the fanfare with which it launched. But at the same time, Sushi was also never able to offer a compellingly better product which perhaps explains why it was able to break the monopolist grip that UNI had on dex volumes but make no further progress. It has been established that Lido’s stETH has both social and economic forces pushing against it, with liquidity and Lindy effects propping up its dominance. But with the advent of a level playing field between mature & established players, Rocket Pool’s superior social narrative and higher resilience can push rETH's market cap over stETH's. The trendline for primitive DeFi assets is toward maximal security. This is how rETH will flip stETH.
The Orange Migration - Withdrawals
In the next six months, it is likely that withdrawals will be live and rETH will gain three massive unique tailwinds: solo staker migration, the flight from stETH/cbETH, and liquidity mitigation.
The first group of users who will be able to transfer to Rocket pool after withdrawals are solo stakers who deposited before Rocket Pool's later launch. There is a strong economic argument for converting a single, regular validator into multiple minipools, at least four for withdrawals, and earning commission on liquid staking deposits. Someone who had 32 ETH staked could migrate and get exposure to 128 ETH. The Smoothing Pool is another benefit only available to Rocket Pool node operators which not only reduces the volatility of rewards but also increases the average return for most participants. Quality-of-life upgrades will continue to roll out.
It is estimated that approximately 30% of the existing stake is managed by these early node operators. Most of this ETH was launched before Rocket Pool went live and certainly before it could be considered battle-tested. Despite so much ETH being staked before Rocket Pool was ready, Rocket Pool node operators still account for 15-25% of all node operators on the network. An increasing number of new node operators are choosing to use Rocket Pool instead of vanilla or other services. As such, it is reasonable to think that a large chunk of users who had staked before Rocket Pool launched will want to migrate over. The migrants will mainly impact the node operator supply, which has a magnified effect on TVL growth. If 10% of the ~4.2 million ETH early solo staked ETH migrates to LEB8s, then rETH capacity would increase by nearly 300%. The protocol would be able to handle 1.7 million rETH TVL. This capacity is going to be needed given the second group of migrants.
The second group of migrants will be from stETH and cbETH. Being able to redeem LSDs for ETH without having to execute a secondary market sale means investors can instantly adjust their risk allocation without worrying about liquidity. Had this facility been available during the June 2022 collapse of 3AC, Lido’s TVL likely would have collapsed immensely. As it was, the significant price drop of stETH vs ETH and concerns about slippage for larger portfolios acted as two disincentives to discourage investors from selling their stETH position at a loss. I expect several cohorts each with different reasons to go through this transition; a moral transitioning, as a response to a slashing event or hack depegging steth, or perhaps yield-seeking.
Finally, and perhaps most importantly, withdrawals will cause the cost of maintaining adequate LSD liquidity to plummet, removing one of Lido’s strongest advantages. A natural arbitrage opens up via the purchase and redemption of a mispriced LSD. Rocket Pool already demonstrates the value of this in the Deposit Pool where rETH mints and burns help keep DEX prices stable. Liquidity can be concentrated tightly around the NAV with strong assurances that arbitrageurs will keep the peg close.
If the opportunity for this type of arbitrage is supported by Ethereum itself, the cost of liquidity will be greatly reduced, leveling the playing field for all staking protocols. Suddenly, the liquidity Lido gets from its multi-billion dollar Curve pool, which costs $20MM a month to maintain, [EDIT: This was true at the peak of the bull market, as of 12/22 it has dropped to $2MM as a reflection of the bear market. The amount of LDO used for Curve has only halved since then] will be available to everyone at no cost through the exit queue. MEV bots will patrol LSD prices looking to squeeze out any ETH for themselves. The type of liquidations that previously saw the price of stETH spiraling would now simply create a feast for arbitrageurs as market prices barely budge. The Lido permissioned operator set can accept new Ethereum deposits as quickly as the Ethereum network allows. However, just as Lido was a black hole for ETH, it may eventually follow a black hole's life trajectory and spew out all of that ETH in the future.
Once the ability to enter and exit an LSD position becomes trivial, expect a surge in Lido’s competitors being integrated in DeFi apps. Further, and perhaps more nefariously, the drop in baseline risk level for all LSD tokens will spur on leveraged staking. Every LSD will be readily folded like icETH, packaged leveraged stETH. While these tokens promise incredible returns, they introduce huge risk to markets. The exit queue is not infinite and it is possible that we may see a second, larger rush in leveraged staking. If this is to pass, the fallout and dust will settle in favor of the most resilient asset.
In fact, the first cases of liquidation from stETH depegs are starting to creep up as novel leverage strategies develop. For example, the Gearbox protocol has created generalized leverage. One user used this generalized leverage to go long on stETH/ETH 8x. A slight depeg on stETH mixed with some oracle technicalities led to this user’s position being the first on the Gearbox protocol to be liquidated. Greed will push users to chase what appears to be safe returns by leveraging LSD tokens. The LSD that is most resilient will survive this.
The Orange Future - Post-Withdrawals
The far future for Rocket Pool is exciting to consider. The pathway to a world dominating protocol is already clear and they consist of four major upgrades that will occur sometime after Shanghai. These upgrades, in vaguely the order we may see them go live are native staking-as-a-service (StaaS), Eigenlayer, forced exits, and distributed validator technology (DVT). Together, these upgrades will allow Rocket Pool to scale into many millions of ETH staked.
One of the most prominent critiques of the Rocket Pool system is that it forces node operators to speculate on RPL. Many home stakers partake because they are skeptical of other tokens and so this is a large barrier. Further, holding RPL becomes a problem for some larger institutions. As such, the Rocket Pool team devised an upgrade that will introduce super nodes that can create novel relationships between the node operator and providers of ETH and RPL collateral. It will introduce an in-protocol way to separate the risk of three tranches: node operation, ETH, and RPL. Rocket Pool stands to greatly expand its total addressable market (TAM) since many individuals express the desire to only stake ETH, not wanting RPL exposure, or vice versa. The StaaS design will allow third party groups like the Node Operator Association to onboard these users and shift the burden of RPL collateral.
Eigenlayer represents a novel idea – stake rehypothecation. The general idea is to add new slashing conditions to a node’s ETH stake based on added tasks, such as oracle duties or data storage. This would allow markets to reuse the incredible amount of economic security locked in the deposit contract. The Eigenlayer team is working on a data availability layer for an initial product design, but other forms of implementation are being explored. In a sufficiently advanced market, a savvy node operator may be able to earn several times the native ETH yield by taking on additional burdens.
The future could have many bespoke setups, with some node operators doing pure ETH staking and others having a dozen extra responsibilities. This creates a challenge for centralized operators such as Lido and an opportunity for permissionless ones like Rocket Pool. For Lido, there will likely need to be a drawn out governance process centered on which Eigenlayer applications are safe to use and present an acceptable level of risk for the DAO. The APR of stETH will suffer as a result. For Rocket Pool, users will likely be free to experiment.
Rocket Pool and Eigenlayer continue to communicate on how the two protocols can be incorporated in a way that makes profit sharing with rETH simple. This relationship between Eigenlayer and Rocket Pool is mutually beneficial. The Rocket Pool ecosystem is the most widely distributed node operator market available on top of Ethereum. Any Eigenlayer product that wants to immediately have strong decentralization can target Rocket Pool operators.
Another future upgrade is forced exits. Currently, there is no way for Rocket Pool to force a validator to exit. This is a limitation of the Ethereum spec and will require an EIP to change. Forced exits would be a useful feature for all LSD protocols to increase decentralization and safety. As such, it is being worked on collaboratively. Forced exits would help prevent bad actors and increase the value retained when actors do go rogue. As a result, the inclusion of forced exits may allow Rocket Pool to drop the bond requirement all the way to 2 ETH. This is a massive change. For perspective, if every current node operator switched to 2ETH pools, that would give Rocket Pool the capacity to onboard 15x as much rETH, or 2.4 million rETH. Currently, 16 node ETH creates 16 rETH, but with forced exits, 16 node ETH will accommodate 240 rETH. Without considering any increase in node operators, this upgrade alone will allow Rocket Pool to compete on the biggest stages.
The drop in collateral from 16 ETH to 2 ETH will also signify a massive increase in the node operator base. If this drop amounts to even a 4x in the node base, despite being 8 times cheaper, then Rocket Pool will scale to 10 million ETH.
Last but far from least is distributed validator technology (DVT). In the past, I have been critical of DVT because I do not view it as a means of solving centralization issues. The long term plan for Lido centers on DVT, wherein my disdain originates. The premise of DVT is that several ‘committee’ members each run a node. If one node goes down for some reason, nothing happens as only some consensus threshold of the committee is needed to maintain uptime. There are huge benefits that can be drawn from this. DVT can prevent most losses from downtime or slashing, however, there are important things DVT cannot do.
DVT does not mitigate centralization in and of itself. For example, if the Lido network’s ~30 node operators began operating on a DVT committee, the stETH token would have much better uptime and diminished tail risks, but the centralization and some tail risks, like smart contract risk and quadratic leaks, remain. Further, DVT in relation to MEV is a field of open exploration. One of the major reasons a bond exists for Rocket Pool is so that there can be some recompense for MEV theft. If it was trivial to steal MEV at the cost of a bond, it may be +EV to spin up mini pools and abandon them after receiving large MEV payouts. These issues must be resolved before it can be adopted by a large protocol.
For Rocket Pool, DVT represents exciting technology that may enable an even lower bond and increase the overall effectiveness of stakers. Home stakers in aggregate tend to have slightly lower average uptime than institutional stakers, often due to unstable internet or power, but DVT would even the playing field greatly.
Collectively, the post-withdrawal era will ensure Rocket Pool can scale to any demand level needed and ensure that node operation as well as liquid staking is competitive in the wider ecosystem. This timeline shows that one of Rocket Pool’s greatest criticisms, that it is capital inefficient, is moot. Rocket Pool can, and will, scale to take on Lido and Coinbase.