Permissionless-pool lending oracle
Kamino Lend's assessment for RD-F-181 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
Kamino Lend V2 allows permissionless creation of lending markets with custom oracle parameters. Scope pre-validation provides some protection. Rhea Finance-class risk (thin permissionless pool oracle) exists but partially mitigated by Scope's validation layer and isolation market design.
Detail #
Confirmed: Kamino Lend V2 allows permissionless lending market creation with 'individual risk oracles' per market (Exponential.fi, blog.kamino.finance). This creates a surface where market creators could configure reserves with spot prices from thin permissionless DEX pools. Mitigants: (a) Scope pre-validates prices with preset rules before accepting oracle updates; (b) Scope TWAP and CappedMostRecentOf composites available; (c) isolation market design limits cross-market contagion. However, if market creators can configure arbitrary thin-pool Scope oracle mappings for new reserves, the permissionless-pool oracle risk pattern (Rhea Finance class) is not fully eliminated.
Sources #
- DocsExponential.fi Kamino Lend V2 — permissionless marketsExponential.fi — Lend V2 permissionless market creation with custom oracle parametersretrieved 2026-04-27
- Kamino Lend V2 announcementblog.kamino.finance — Introducing Kamino Lend V2, permissionless marketsretrieved 2026-04-27
- Scope price pre-validationScope most_recent_of.rs — pre-validation (staleness, divergence) before price acceptanceretrieved 2026-04-27
Methodology #
Determine whether the lending protocol accepts spot prices from a DEX where any user can permissionlessly create new pools, without requiring a TWAP window, liquidity floor, or token-age minimum on the venue side.
See the full factor methodology and distribution across all protocols →