★ Oracle source = spot DEX pool (no TWAP)
SUNSwap (sun.io)'s assessment for RD-F-053 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
[★ CRITICAL — GREEN] SUNSwap is a price source, not a price consumer. No spot DEX pool oracle is consumed by any V1/V2/V3/V4 contract. SunswapV2Pair.sol import list: ISunswapV2Pair, SunswapV2ERC20, Math, UQ112x112, IERC20, ISunswapV2Factory, ISunswapV2Callee, TransferHelper — zero oracle interfaces. V4 PoolManager.sol: all-internal type imports, zero external oracle. V4Router.sol: IVault + ICLPoolManager (internal) only. V4 hooks could implement oracle reads as a custom extension (confirmed by AiCoin article: 'easily integrating on-chain oracles' described as optional developer hook capability, not core architecture), but no canonical/default periphery hook does so. price0CumulativeLast/price1CumulativeLast in V2 are TWAP accumulators exposed for external consumers — outbound oracle provision, not inbound oracle consumption.
Sources #
- GitHubSunswapV2Pair.sol — oracle import checksun-protocol/sunswap-v2-contracts: contracts/SunswapV2Pair.sol — confirmed zero oracle import; TWAP accumulators are outboundretrieved 2026-05-17
- AiCoin — SunSwap V4 Launch: oracle = optional hook extensionAiCoin: SUNSwap V4 oracle integration described as optional hook capability, not core dependencyretrieved 2026-05-17
- V4 PoolManager.sol — oracle import checksun-protocol/sunswap-v4-core: contracts/PoolManager.sol — confirmed zero oracle importretrieved 2026-05-17
Methodology #
Determine whether the primary oracle for any asset/market reads spot price from a single DEX pool without a TWAP window or secondary source.
See the full factor methodology and distribution across all protocols →