★ Oracle source = spot DEX pool (no TWAP)
dYdX v4 (dYdX Chain)'s assessment for RD-F-053 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
[★ CRITICAL — GREEN] dYdX v4 uses Slinky validator-consensus oracle, NOT a spot DEX pool. Each validator independently aggregates CEX API prices and submits via ABCI++ vote extensions. x/prices aggregates via stake-weighted median (GetValidMedianPrices). Manipulation requires colluding >1/3 staked DYDX — same Byzantine-fault threshold as chain consensus, not a flash-loan-exploitable DEX pool. F053 red class (spot DEX manipulation) does NOT apply. Slinky market price decoder verifies prices are derived from vote-extensions injected into blocks. Price validation enforces MinPriceChangePpm and crossing-price bounds.
Sources #
- GitHubslinky_market_price_decoder.go — dYdX v4-chainslinky_market_price_decoder.go: verifies market price update was derived from vote-extensions injected into blockretrieved 2026-05-17
- Running a Validator — dYdX DocsValidator docs: Slinky mandatory from v5.0.0; each validator runs sidecar aggregating CEX dataretrieved 2026-05-17
- validate_market_price_updates.go — dYdX v4-chainvalidate_market_price_updates.go: GetValidMedianPrices, non-deterministic validation against index priceretrieved 2026-05-17
Methodology #
Determine whether the primary oracle for any asset/market reads spot price from a single DEX pool without a TWAP window or secondary source.
See the full factor methodology and distribution across all protocols →