Summary - Check for zero address should be applied after calling .getAddress().
Vulnerability Details- In functions _getRethContract(), getBaseCollateral() and depositEth() after calling function getAddress() address returned by this function is not checked for zero address.
Impact - In functions like depositEth() address returned by getaddress() is stored in variable rocketDepositPool and then value is deposited in this address which could result in value deposited in zero address.
Tools Used - Manually
Recommendations - apply require() to check for zero address on the return value of getaddress().