defirisk.co
rubric v1.7.0

Immutable oracle address

Wormhole's assessment for RD-F-180 — scored gray on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

Immutable oracle address / no admin-replaceable wrapper | Not applicable to Core Bridge — no oracle address exists in the critical path. For peripheral Token Bridge Relayer swap rates: uses centralized owner-settable rates (no Chainlink address at all — future Pyth proposal per DESIGN.md). NTT: no oracle address. F180 in the EVM immutable-keyword sense: no collateral oracle address is hardcoded as `immutable` in any production contract because no such oracle is used. Substrate-generalized def...

Sources #

  • Curator note
    Extracted from 03-oracle-deps.md — RD-F-180; no URL citedretrieved 2026-04-28

Methodology #

Determine whether any collateral oracle address is marked `immutable` in protocol config with no admin-replaceable adapter wrapper, preventing the protocol from repricing when the upstream asset depegs.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol wormhole factor RD-F-180 score gray collected_at 2026-04-28 01:38:43