defirisk.co
rubric v1.7.0

Immutable oracle address

Sky Lending (formerly MakerDAO)'s assessment for RD-F-180 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

Oracle addresses are NOT immutable. OSM exposes change(address) restricted to governance wards. Spot module ilk.pip replaceable via file(bytes32,bytes32,address). May 2025 executive vote demonstrates live oracle replacement workflow. 48h GSM Pause Delay applies.

Sources #

  • URL
    https://docs.makerdao.com/smart-contract-modules/oracle-module/oracle-security-module-osm-detailed-documentationretrieved 2026-04-27
  • Governance
    https://vote.makerdao.com/executive/template-executive-vote-mkr-to-sky-upgrade-phase-one-adding-protego-to-the-chainlog-spark-proxy-spell-may-15-2025retrieved 2026-04-27
  • URL
    https://docs.makerdao.com/smart-contract-modules/core-module/spot-detailed-documentationretrieved 2026-04-27

Methodology #

Determine whether any collateral oracle address is marked `immutable` in protocol config with no admin-replaceable adapter wrapper, preventing the protocol from repricing when the upstream asset depegs.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol sky-lending factor RD-F-180 score green collected_at 2026-04-28 00:43:18