defirisk.co
rubric v1.7.0

Oracle source = spot DEX pool (no TWAP)

Lido's assessment for RD-F-053 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

[★ CRITICAL] No DEX spot price oracle used anywhere in Lido core protocol. stETH/ETH rate is internal accounting (totalPooledEth/totalShares). No slot0(), getReserves(), or DEX pool read exists in core contracts.

Detail #

stETH impl 0x6ca84080381e43938476814be61b779a8bb6a600: getSharesByPooledEth confirmed uses internal state variables only. StakingRouter source confirmed no external price oracle calls. AccountingOracle reports validator balances — not a price feed. Factor definition (spot DEX pool with no TWAP) is architecturally inapplicable.

Sources #

Methodology #

Determine whether the primary oracle for any asset/market reads spot price from a single DEX pool without a TWAP window or secondary source.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol lido factor RD-F-053 score green collected_at 2026-04-28 13:58:42