★ Oracle source = spot DEX pool (no TWAP)
USDD (Decentralized USD)'s assessment for RD-F-053 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
NOT a spot-DEX-pool oracle. USDD uses Chainlink and WINkLink price feeds aggregated via a Median contract, then passed through an OSM (Oracle Security Module/Oracle State Machine). ChainSecurity Jan-2025 audit confirmed 'oracles modules are deployed and connected correctly; primary oracles are wired to the Median contract for deviation check and eventually linked to the OSM.' Multi-feed aggregation via Median provides manipulation resistance. F053 critical factor NOT triggered.
Sources #
- AuditPUBLIC Code Assessment of USDD V2 Smart Contracts, January 24 2025ChainSecurity USDD V2 audit Jan 2025: 'oracles modules are deployed and connected correctly; primary oracles are wired to the Median contract for deviation check and eventually linked to the OSM'retrieved 2026-05-17
- USDD Oracle Developer DocsUSDD oracle docs: 'USDD use Chainlink and WinkLink Data Feeds as its primary Oracles' — not DEX pool spot pricesretrieved 2026-05-17
Methodology #
Determine whether the primary oracle for any asset/market reads spot price from a single DEX pool without a TWAP window or secondary source.
See the full factor methodology and distribution across all protocols →