defirisk.co
rubric v1.7.0

Immutable oracle address

Stargate Finance's assessment for RD-F-180 — scored gray on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

Immutable oracle address (no admin-replaceable wrapper) | NOT TRIGGERED. Where oracles are used (FeeLibraryV07), the `setTokenPriceFeed(uint256 _poolId, address _priceFeedAddress) external onlyOwner` function allows the owner to replace oracle addresses per pool without a full contract upgrade. The oracle address is stored in `poolIdToPriceFeed` mapping, not as an `immutable` variable. | FeeLibraryV07 BaseScan source: `mapping(uint256 => address) public poolIdToPriceFeed` and `setTokenPriceFe...

Sources #

  • Curator note
    Extracted from 03-oracle-deps.md — RD-F-180; no URL citedretrieved 2026-04-28

Methodology #

Determine whether any collateral oracle address is marked `immutable` in protocol config with no admin-replaceable adapter wrapper, preventing the protocol from repricing when the upstream asset depegs.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol stargate factor RD-F-180 score gray collected_at 2026-04-28 01:38:41