★ Immutable oracle address

Kinetiq's assessment for RD-F-180 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

[★ F180 COMPOSE-COUNTED — GREEN] Oracle adapters in OracleManager are admin-replaceable: authorizeOracleAdapter(address adapter) (MANAGER_ROLE) and deauthorizeOracle(address) (MANAGER_ROLE) allow adding/removing adapters without contract upgrade. DefaultOracle's OPERATOR_ROLE is revocable/regrantable by DEFAULT_ADMIN_ROLE via OpenZeppelin AccessControl — operator address not immutable. No 'immutable' keyword for oracle addresses found in source. F180 does not fire. NOTE: This is a ★ critical factor per PD-017 (compose-counted) — flagged for orchestrator T-14 post-launch promotion tracking.

Sources #

GitHub
Kinetiq OracleManager.sol — Code4rena audit repoOracleManager.sol: authorizeOracleAdapter(address adapter) external whenNotPaused onlyRole(MANAGER_ROLE); deauthorizeOracle(address) external onlyRole(MANAGER_ROLE) — adapters are admin-replaceable, not immutableretrieved 2026-05-17
Etherscan
Kinetiq OracleManager — HyperEVMScanOracleManager 0x192826e470bd65FDC2CB472eDd834D096233049b — TransparentUpgradeableProxy; implementation upgradeable; AccessControl role grants/revocations confirmed via HyperEVMScanretrieved 2026-05-17

Methodology #

Determine whether any collateral oracle address is marked `immutable` in protocol config with no admin-replaceable adapter wrapper, preventing the protocol from repricing when the upstream asset depegs.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol kinetiq factor RD-F-180 score green collected_at 2026-05-17 15:29:57