★ Immutable oracle address

Centrifuge's assessment for RD-F-180 — scored red on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

SimplePriceManager.sol declares address public immutable navUpdater — the NAV price submitter address cannot be changed after deployment by any admin action. If navUpdater key is compromised, the protocol must deploy a new SimplePriceManager contract. OracleValuation.sol declares IHub public immutable hub. WormholeAdapter.sol declares relayer: IWormholeRelayer (immutable). This is a substrate-agnostic immutability pattern meeting the PD-023 generalized definition of F180.

Sources #

GitHub
https://github.com/centrifuge/protocol/blob/main/src/managers/hub/SimplePriceManager.solretrieved 2026-04-27
URL
https://audits.sherlock.xyz/contests/1028retrieved 2026-05-06
GitHub
https://github.com/centrifuge/protocol/blob/main/src/adapters/WormholeAdapter.solretrieved 2026-04-27
URL
https://docs.centrifuge.io/developer/protocol/security/retrieved 2026-05-06
GitHub
https://github.com/centrifuge/protocol/blob/main/src/valuations/OracleValuation.solretrieved 2026-04-27

Methodology #

Determine whether any collateral oracle address is marked `immutable` in protocol config with no admin-replaceable adapter wrapper, preventing the protocol from repricing when the upstream asset depegs.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol centrifuge factor RD-F-180 score red collected_at 2026-04-30 21:19:10