★ Immutable oracle address
Wormhole's assessment for RD-F-180 — scored gray on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
Immutable oracle address / no admin-replaceable wrapper | Not applicable to Core Bridge — no oracle address exists in the critical path. For peripheral Token Bridge Relayer swap rates: uses centralized owner-settable rates (no Chainlink address at all — future Pyth proposal per DESIGN.md). NTT: no oracle address. F180 in the EVM immutable-keyword sense: no collateral oracle address is hardcoded as `immutable` in any production contract because no such oracle is used. Substrate-generalized def...
Sources #
- Curator noteExtracted from 03-oracle-deps.md — RD-F-180; no URL citedretrieved 2026-04-28
Methodology #
Determine whether any collateral oracle address is marked `immutable` in protocol config with no admin-replaceable adapter wrapper, preventing the protocol from repricing when the upstream asset depegs.
See the full factor methodology and distribution across all protocols →