Permissionless-pool lending oracle
Aave v3's assessment for RD-F-181 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
Aave v3 does not accept spot prices from a permissionlessly-listed DEX pool. Market listing requires governance approval (ASSET_LISTING_ADMIN role, DAO vote, risk committee review). The April 2026 rsETH incident was not an F181 failure — rsETH was governance-approved collateral; the failure was a bridge exploit on an already-listed asset.
Sources #
- URLAave governance forum — asset listing processAave governance forum — asset listing proposals require governance vote and risk reviewretrieved 2026-04-27
- Aave governance documentation — asset listingAave governance asset listing process — ASSET_LISTING_ADMIN role requiredretrieved 2026-04-27
Methodology #
Determine whether the lending protocol accepts spot prices from a DEX where any user can permissionlessly create new pools, without requiring a TWAP window, liquidity floor, or token-age minimum on the venue side.
See the full factor methodology and distribution across all protocols →