★ Immutable oracle address
Stake DAO's assessment for RD-F-180 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
SOURCE-CONFIRMED IMMUTABILITY in Morpho lending vault oracle adapters (peripheral module). OracleChainlinkAdapter.sol: declares 'IOracle public immutable ORACLE' with no admin setter function — oracle address cannot be changed post-deployment. CurvePriceFeedChainlinkAdapter.sol: declares 'ICurvePriceFeed public immutable CURVE_PRICE_FEED' with no admin setter. BaseOracle.sol: feed addresses set in constructor, no admin setter found (WebFetch confirmed). However: (1) the immutability is in peripheral Morpho lending vaults, NOT the core $160M liquid locker; (2) core locker path is oracle-free — F180 cannot fire there; (3) Morpho's market architecture means remediation is a new market deployment with updated oracle (feasible governance action); (4) Trust Security 2025-08 audit specifically covered these oracle adapters. Yellow scored (not red) because the immutability is in a peripheral subsystem with limited TVL exposure relative to total protocol TVL. FLAG FOR ORCHESTRATOR: F180 IS ★ cr
Sources #
- GitHubOracleChainlinkAdapter.sol — immutable oracle address confirmedpackages/periphery/src/lending/oracles/OracleChainlinkAdapter.sol — 'IOracle public immutable ORACLE'; no admin setter; constructor-only initializationretrieved 2026-05-16
- CurvePriceFeedChainlinkAdapter.sol — immutable feed address confirmedpackages/periphery/src/lending/oracles/CurvePriceFeedChainlinkAdapter.sol — 'ICurvePriceFeed public immutable CURVE_PRICE_FEED'; no admin setterretrieved 2026-05-16
- BaseOracle.sol — no admin setter for oracle addressespackages/periphery/src/lending/oracles/BaseOracle.sol — feed addresses constructor-set, no admin update function foundretrieved 2026-05-16
Methodology #
Determine whether any collateral oracle address is marked `immutable` in protocol config with no admin-replaceable adapter wrapper, preventing the protocol from repricing when the upstream asset depegs.
See the full factor methodology and distribution across all protocols →