Oracle providers used
Hyperlane's assessment for RD-F-048 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
Core Mailbox and MultisigISM verification paths use NO external price oracle. Gas pricing uses StorageGasOracle with owner-set values (no Chainlink call). 19 Chainlink feeds in data cache are associated with specific Warp Route ERC4626 collateral implementations, not the core message-security path. Confirmed by reading StorageGasOracle.sol (owner-only setRemoteGasData), Mailbox.sol process() (no oracle call), and HypERC20Collateral.sol (no oracle).
Sources #
- GitHubStorageGasOracle.sol — Hyperlane monorepohyperlane-monorepo/solidity/contracts/hooks/igp/StorageGasOracle.sol — setRemoteGasData() owner-only manual setter, no Chainlink callretrieved 2026-05-17
- Mailbox.sol — Hyperlane monorepohyperlane-monorepo/solidity/contracts/Mailbox.sol — process() function has no oracle callretrieved 2026-05-17
Methodology #
List all oracle providers used (Chainlink, Pyth, Redstone, Uniswap-TWAP, in-house, etc.) per asset/market pair in the protocol.
See the full factor methodology and distribution across all protocols →