★ Immutable oracle address
Lombard Finance's assessment for RD-F-180 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
[★ CANDIDATE — F180, held per T-12 PD-017; not counted in 19★ critical total; flag for T-14 post-launch promotion review] StakedLBTCOracle's consortium address is admin-configurable via changeConsortium(owner-only). Not immutable — this is the correct design pattern (owner can replace compromised Consortium contract). However, the setter is timelocked behind LombardTimeLock with minDelay = 3600s (1 hour) only. At $1.07B TVL, a 1-hour oracle consortium-address change window is short. Chainlink BTC/USD and ETH/USD feed addresses are external consumer-side configs, not Lombard-owned immutables. No immutable oracle address variable with no setter found in Lombard source. Yellow: oracle setter exists (not a fixed immutable, which is positive); 1-hour timelock is below 24h best practice for a $1B+ protocol.
Sources #
- GitHubLombard StakedLBTCOracle sourceStakedLBTCOracle.sol — changeConsortium() admin setterretrieved 2026-05-05
- Lombard TimelockController (Ethereum)LombardTimeLock 0x055E84e7FE8955E2781010B866f10Ef6E1E77e59 — minDelay 3600sretrieved 2026-05-05
Methodology #
Determine whether any collateral oracle address is marked `immutable` in protocol config with no admin-replaceable adapter wrapper, preventing the protocol from repricing when the upstream asset depegs.
See the full factor methodology and distribution across all protocols →