defirisk.co
rubric v1.7.0

Oracle source = spot DEX pool (no TWAP)

Cap (cUSD / stcUSD)'s assessment for RD-F-053 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

[★ CRITICAL] GREEN — No spot DEX pool oracle. Cap uses Chainlink push feeds (latestRoundData via adapter), RedStone push feed (NAV-based, 0.05% deviation), and Morpho/Chainlink adapter for stcUSD (ERC4626 conversion rate + Chainlink feeds, no TWAP). Primary/backup fallback implemented in PriceOracle.sol. No Uniswap TWAP or spot pool in price path.

Sources #

  • GitHub
    PriceOracle.sol — no spot DEX pricing confirmedPriceOracle.sol _getPrice() uses staticcall to adapter with encoded payload — Chainlink adapter pattern, no DEX pool call; confirmed no TWAP window, no UniswapV3 pool referenceretrieved 2026-05-17
  • Etherscan
    Morpho stcUSD oracle adapter — spot Chainlink onlyMorpho ChainlinkOracleV2 adapter 0x8E3386B2f6084eB1B0988070c3d826995BD175c0 — uses latestRoundData() + ERC4626 convertToAssets(), no TWAP or DEX poolretrieved 2026-05-17
  • Internal
    00-data-cache.json oracle_feeds verificationData cache oracle_feeds: all 19 feed entries are Chainlink addresses (no Uniswap pool, no DEX AMM address)retrieved 2026-05-17

Methodology #

Determine whether the primary oracle for any asset/market reads spot price from a single DEX pool without a TWAP window or secondary source.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol cap factor RD-F-053 score green collected_at 2026-05-17 10:56:24