★ Immutable oracle address
Save (formerly Solend)'s assessment for RD-F-180 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
Oracle addresses (pyth_oracle_pubkey, switchboard_oracle_pubkey) ARE admin-replaceable via the process_update_reserve_config instruction — no full binary upgrade required. Required signer: lending_market_owner_info (key 5pHk2TmnqQzRF9L6egy5FfiyBgS7G9cMZ5RFaJAvghzw). F180 definition: 'oracle source address or equivalent is not programmatically replaceable by admin action without a full binary or protocol upgrade' — here it IS replaceable, therefore F180 = green. Governance implication: oracle replacement has no timelock (scored under F033/F035 by governance-admin-analyst). F180 strictly tests replaceability, not timelocked replaceability.
Sources #
- GitHubSolend processor.rs — process_update_reserve_config oracle replaceabilityprocessor.rs process_update_reserve_config: 'Updates pyth_oracle_pubkey if different; updates switchboard_oracle_pubkey if different; requires lending_market_owner_info.is_signer'retrieved 2026-05-17
- Solend Architecture — Access Controlsdocs.solend.fi/architecture/access-controls (via web search): 'lending market owner...to update the configs...includes oracles used, their addresses'retrieved 2026-05-17
Methodology #
Determine whether any collateral oracle address is marked `immutable` in protocol config with no admin-replaceable adapter wrapper, preventing the protocol from repricing when the upstream asset depegs.
See the full factor methodology and distribution across all protocols →