★ Immutable oracle address

deBridge's assessment for RD-F-180 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

signatureVerifier in DeBridgeGate is updatable via setSignatureVerifier(address _verifier) (DeBridgeGate.sol line 831), restricted to admin role. Not immutable. No lending oracle in protocol. F180 does not apply to this bridge-validator-committee design. [F180 critical-CANDIDATE per T-12 PD-017; promoted to star by T-14 2026-04-22. Evaluated GREEN for deBridge -- no escalation needed.]

Sources #

GitHub
https://github.com/debridge-finance/debridge-contracts-v1/blob/main/contracts/transfers/DeBridgeGate.solretrieved 2026-04-28

Methodology #

Determine whether any collateral oracle address is marked `immutable` in protocol config with no admin-replaceable adapter wrapper, preventing the protocol from repricing when the upstream asset depegs.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol debridge factor RD-F-180 score green collected_at 2026-04-28 01:27:58