defirisk.co
rubric v1.7.0

Immutable oracle address

EigenLayer's assessment for RD-F-180 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

[★ CRITICAL-CANDIDATE per T-12 PD-017 — evaluate but do not count in 19 ★ critical total; flag for orchestrator T-14 post-launch tracking] The EIP-4788 BEACON_ROOTS precompile at 0x000F3df6D732807Ef1319fB7B8bB8522d0Beac02 is hardcoded in EigenPod.sol as a constant. F180 targets 'oracle source address is not programmatically replaceable by admin action' — specifically the failure mode where a vendor-chosen oracle address cannot be replaced post-depeg. The EIP-4788 address is an Ethereum consensus-layer protocol primitive (analogous to the ECRECOVER precompile), not a vendor oracle address. Hardcoding it is correct design. The EigenPodManager proxy (0x91E677b07F7AF907ec9a428aafA9fc14a0d3A338) is an EIP-1967 transparent upgradeable proxy, so if EIP-4788 behavior changes in a future hard fork, the EigenPod implementation can be upgraded via governance. The legacy EigenLayerBeaconOracle (0x343907185b71aDF0eBa9567538314396aa985442) was the prior approach; current EigenPod.sol uses EIP-4788 d

Sources #

Methodology #

Determine whether any collateral oracle address is marked `immutable` in protocol config with no admin-replaceable adapter wrapper, preventing the protocol from repricing when the upstream asset depegs.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol eigenlayer factor RD-F-180 score green collected_at 2026-04-28 13:58:44