★ Immutable oracle address
Superstate's assessment for RD-F-180 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
[★ F180 CANDIDATE — PD-017 held; evaluate but do not count in 19★ total; flag for T-14 orchestrator tracking] Split finding: (1) SuperstateTokenV5_1 (0x1f50a1EE...): superstateOracle declared as storage variable with explicit setOracle(address) admin setter — oracle IS admin-replaceable within current implementation. (2) RedemptionIdle impl (0x8EFBa8Af...): CHAINLINK_FEED_ADDRESS declared as 'immutable' — hardcoded at deploy time; cannot be updated within current implementation. Rotation requires proxy admin to upgrade to a new implementation. This is not a clean single-tx setOracle() path. The proxy is upgradeable (Transparent Upgradeable Proxy 0x4c21b755...), but upgrading is a heavier operation than a storage variable setter. Composite yellow: primary subscription path is cleanly swappable (green pattern); critical redemption path requires proxy upgrade to rotate (yellow pattern). Same tier as circle-usyc F180 yellow.
Sources #
- EtherscanRedemptionIdle Implementation — EtherscanRedemptionIdle impl 0x8EFBa8Af... — CHAINLINK_FEED_ADDRESS declared immutable; hardcoded at deploy; no setOracle/updateFeed function in ABIretrieved 2026-05-16
- RedemptionIdle Proxy — EtherscanRedemptionIdle proxy 0x4c21b755... — TransparentUpgradeableProxy; implementation can be replaced by ProxyAdmin (0xCb8d325C...); proxy-upgrade-as-oracle-rotation path exists but requires full implementation upgraderetrieved 2026-05-16
- SuperstateTokenV5_1 Implementation — EtherscanSuperstateTokenV5_1 impl 0x1f50a1EE... — superstateOracle (storage variable) + setOracle(address _newOracle) function explicitly visible in ABI and code; oracle IS swappableretrieved 2026-05-16
Methodology #
Determine whether any collateral oracle address is marked `immutable` in protocol config with no admin-replaceable adapter wrapper, preventing the protocol from repricing when the upstream asset depegs.
See the full factor methodology and distribution across all protocols →