★ Immutable oracle address
Jito's assessment for RD-F-180 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
[★ F180 CRITICAL — T-12 PD-017 tracking] YELLOW. StakePoolRate at 0x8aa73ec870dc4a0af6b471937682a8fc3b8a21f8 is immutable: constructor params (Wormhole address, stakePoolAccount, staleness thresholds) stored immutably, no admin-replaceable wrapper. Repository describes it as 'an immutable QueryResponse processor.' Downstream EVM consumers (Aave, Morpho) have hardcoded this address. Not RED because: (a) Jito is oracle source, not consumer; (b) failure requires 13-of-19 Wormhole guardian compromise; (c) underlying rate is intrinsic stake pool state, not a depeggable third-party asset. Rated YELLOW — operational inflexibility and no upgrade path. Orchestrator must log for T-14 post-launch promotion tracking.
Sources #
- GitHubJitoSOL Wormhole Updater — immutable contract descriptiongithub.com/jito-foundation/jitosol-wormhole-updater — described as 'immutable QueryResponse processor'retrieved 2026-04-29
- StakePoolRate.sol — immutable constructorStakePoolRate.sol constructor: address _wormhole passed to QueryResponse(_wormhole) parent immutably; no setWormhole() or upgrade functionretrieved 2026-04-29
Methodology #
Determine whether any collateral oracle address is marked `immutable` in protocol config with no admin-replaceable adapter wrapper, preventing the protocol from repricing when the upstream asset depegs.
See the full factor methodology and distribution across all protocols →