★ Immutable oracle address
Hyperliquid's assessment for RD-F-180 — scored red on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
CRITICAL-CANDIDATE (★ promoted by T-14 2026-04-22, PD-023 resolved). Hyperliquid's oracle is embedded in the closed-source HyperCore L1 binary (github.com/hyperliquid-dex/node). Oracle source addresses, CEX-endpoint configurations, and weighting parameters are not programmatically replaceable by any admin action short of a full binary upgrade requiring validator consensus and Hyperliquid Labs code changes. No admin-replaceable adapter wrapper exists. PD-023 explicitly extended F180 to cover 'closed-source binary oracle embeddings (Hyperliquid-class).' This is the canonical instance. NOTE FOR ORCHESTRATOR: F180 is ★ under rubric v1.4/v1.5 and counts toward the ★ critical total.
Sources #
- DocsHyperCore Oracle — Hyperliquid DocsHyperliquid Oracle documentation — no admin-replaceable wrapperretrieved 2026-04-28
- hyperliquid-dex/node — GitHub (closed-source binary releases)Hyperliquid node repository — closed-source binaryretrieved 2026-04-28
- Hyperliquid Protocol Profile §3Protocol profile §3 — HyperCore closed-sourceretrieved 2026-04-28
Methodology #
Determine whether any collateral oracle address is marked `immutable` in protocol config with no admin-replaceable adapter wrapper, preventing the protocol from repricing when the upstream asset depegs.
See the full factor methodology and distribution across all protocols →