★ Immutable oracle address
Ondo Finance's assessment for RD-F-180 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
**GREEN — oracle IS admin-replaceable, but without timelock.** The OUSG InstantManager (`0x93358db73B6cd4b98D89c8F5f230E81a95c2643a`) includes `setOndoOracle()` callable by `CONFIGURER_ROLE`, allowing the oracle address to be updated. The RWADynamicOracle address in USDY InstantManager is similarly admin-settable. This means the F180 "immutable oracle / cannot be replaced" failure mode does NOT apply. The oracle can be replaced. However, there is NO timelock on this change — the oracle can be...
Sources #
- EtherscanRWADynamicOracle (verified: 'Ondo Finance: USDY Price Oracle')https://etherscan.io/address/0xa0219aa5b31e65bc920b5b6dfb8edf0988121de0retrieved 2026-05-12
- OUSG_InstantManager (verified: 'Ondo Finance: OUSG Instant Manager 2')https://etherscan.io/address/0x93358db73B6cd4b98D89c8F5f230E81a95c2643aretrieved 2026-05-12
Methodology #
Determine whether any collateral oracle address is marked `immutable` in protocol config with no admin-replaceable adapter wrapper, preventing the protocol from repricing when the upstream asset depegs.
See the full factor methodology and distribution across all protocols →