★ Oracle source = spot DEX pool (no TWAP)
Euler V2's assessment for RD-F-053 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
[★ CRITICAL] UniswapV3Oracle adapter has MIN_TWAP_WINDOW = 5 minutes (immutable constant in source). Permissionless vault deployers can configure vaults with 5-minute TWAP on any Uniswap V3 pool. Official Euler Prime cluster uses Chainlink (not spot DEX). Not red because the high-TVL official cluster uses Chainlink-tier oracles. Yellow because the protocol infrastructure structurally permits F053-class oracle configurations on permissionless vaults with no protocol-level guard.
Sources #
- GitHubUniswapV3Oracle — TWAP Window ConfigurationUniswapV3Oracle.sol MIN_TWAP_WINDOW = 5 minutes constant; twapWindow immutableretrieved 2026-05-04
Methodology #
Determine whether the primary oracle for any asset/market reads spot price from a single DEX pool without a TWAP window or secondary source.
See the full factor methodology and distribution across all protocols →