★ Immutable oracle address
Convex Finance's assessment for RD-F-180 — scored not_applicable on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
[★ CRITICAL-CANDIDATE PD-017] Not applicable — Convex's core contracts contain no oracle address, immutable or otherwise. The immutable keyword does not appear on any oracle-type variable in Booster.sol, CvxLocker.sol, BaseRewardPool.sol, or any core contract because there are no oracle variables. The factor tests inability to swap a broken oracle; Convex has no oracle to swap. This is the correct not_applicable resolution for an oracle-free staking protocol, not a gray evasion. Orchestrator tracking: F180 critical-CANDIDATE status recorded; outcome is not_applicable for this protocol type.
Sources #
- DocsConvex Finance — Multisig Admin RightsConvex multisig admin rights docs list no oracle configuration power; confirms no oracle address managed by Convex adminretrieved 2026-05-16
- Convex Finance Platform Contracts — oracle address immutability checkconvex-eth/platform — Booster.sol, CvxLocker.sol, BaseRewardPool.sol, Interfaces.sol: no immutable keyword on any oracle address variable; no setOracle or updateFeed function exists because there is no oracle configuredretrieved 2026-05-16
Methodology #
Determine whether any collateral oracle address is marked `immutable` in protocol config with no admin-replaceable adapter wrapper, preventing the protocol from repricing when the upstream asset depegs.
See the full factor methodology and distribution across all protocols →