defirisk.co
rubric v1.7.0

Permissionless-pool lending oracle

JustLend DAO's assessment for RD-F-181 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

JustLend is a curated-listing Compound-fork. New markets are listed only via GovernorBravo governance proposals (200M WJST threshold, 600M quorum, ~3-day vote, 48h Timelock). There is no permissionless pool creation — users cannot add arbitrary token pools or oracle sources. The permissionless-pool oracle attack vector (Rhea Finance NEAR class: fake pools created by users to manipulate collateral prices) does not apply to JustLend.

Sources #

Methodology #

Determine whether the lending protocol accepts spot prices from a DEX where any user can permissionlessly create new pools, without requiring a TWAP window, liquidity floor, or token-age minimum on the venue side.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol justlend factor RD-F-181 score green collected_at 2026-05-17 10:25:32