defirisk.co
rubric v1.7.0

Max-deviation threshold (bps)

A oracle & external dependencies factor in the v1.7.0 rubric. Measured per protocol on a s cadence.

Methodology how we score #

**What this measures** This factor records the specific circuit-breaker threshold configured for oracle price deviation, expressed in basis points (bps). This field is only populated when RD-F-057 confirms a circuit breaker exists; the value is read directly from on-chain configuration or governance parameters.

**Why it matters** The presence of a circuit breaker (RD-F-057) is necessary but not sufficient — the threshold calibration determines whether it provides meaningful protection. A 10,000 bps (100%) threshold circuit breaker is nearly useless for assets that can be moved 50x via flash loans. Conversely, an excessively tight threshold (10–20 bps) on a volatile asset may trigger false positives during normal market conditions, causing unnecessary protocol pauses. The threshold must be calibrated to the asset's natural volatility and the minimum manipulation cost given available liquidity, creating a per-asset configuration requirement that curators must verify against oracle pool depth (RD-F-055).

**Green / Yellow / Red** Green is scored when the threshold is within the range of 200–2000 bps (2–20%) and is documented as calibrated to the asset's historical volatility profile. Yellow is scored when the threshold exists but is either too wide (over 2000 bps for stable assets) or too narrow (under 100 bps for volatile assets). Red is scored when no threshold is configured (i.e., circuit breaker field is N/A because RD-F-057 is red).

**Common gray cases** Gray is applied when the threshold is set dynamically by an off-chain keeper and the current value cannot be read from a public on-chain configuration.

**Notable historical examples** No cross-hacked incidents are currently linked in the database for this factor.

Measurement what to look for #

If a circuit breaker exists, read the configured deviation threshold in basis points.

Data & output #

Data source
`maxDeviationBps()` or equivalent state variable via RPC on oracle/lending contract
Output format
Green / Yellow / Red
Evidence artifact
Contract address + deviation threshold bps value
Confidence signal
green = threshold ≤2000 bps (20%); yellow = 2001–5000 bps; red = >5000 bps or unconfigured; gray = no circuit breaker (see F057)

Scored protocols 80 carry this factor #

Protocol RD-F-058
Aave v3 ethereum yellow Across Protocol ethereum not_applicable Aerodrome Finance base not_applicable Axelar Network ethereum gray Babylon Protocol bitcoin not_applicable Balancer (v2 + v3) ethereum not_applicable Beefy Finance ethereum gray BENQI avalanche not_applicable BlackRock USD Institutional Digital Liquidity Fund (BUIDL) ethereum not_applicable Cap (cUSD / stcUSD) ethereum yellow Centrifuge ethereum gray Chainlink CCIP ethereum not_assessed Circle USYC binance not_applicable Compound V3 (Comet) ethereum not_applicable Concrete ethereum green Convex Finance ethereum not_applicable crvUSD (Curve Stablecoin) ethereum green Curve Finance ethereum yellow deBridge ethereum not_applicable Dolomite ethereum yellow dYdX v4 (dYdX Chain) dydx green EigenLayer ethereum not_assessed Ethena ethereum yellow ether.fi ethereum gray Euler V2 ethereum gray Falcon Finance ethereum gray Fluid ethereum not_applicable Frax Finance ethereum gray GMX v2 (GMX Synthetics) arbitrum yellow Hyperlane ethereum green Hyperliquid arbitrum red Jito solana yellow Jupiter solana yellow Jupiter Perpetual Exchange solana gray JustLend DAO tron gray Kamino Lend solana yellow Kinetiq hyperliquid yellow Lido ethereum not_applicable Liquid Collective (LsETH) ethereum not_applicable Liquity V1 + V2 (LUSD / BOLD) ethereum yellow Lista DAO bsc gray Lombard Finance ethereum green M^0 ethereum not_applicable Maple Finance ethereum not_applicable Marinade Finance solana gray Meteora solana not_applicable mETH Protocol ethereum green Midas ethereum yellow Morpho V1 (Morpho Blue + MetaMorpho) ethereum not_applicable Multipli ethereum yellow Ondo Finance ethereum yellow OpenEden ethereum yellow Orca solana not_applicable PancakeSwap bsc not_assessed Pendle Finance ethereum gray Polymarket polygon not_applicable QuickSwap polygon green Raydium solana yellow Rocket Pool ethereum yellow Sanctum solana yellow Save (formerly Solend) solana not_applicable Sky Lending (formerly MakerDAO) ethereum yellow Spark Protocol ethereum green Spiko stellar not_applicable Stake DAO ethereum yellow StakeWise v3 ethereum gray Stargate Finance ethereum gray stHYPE (Valantis Labs) hyperliquid not_applicable SUNSwap (sun.io) tron not_applicable Superstate ethereum yellow Sushi (SushiSwap) — v2 + v3 + Trident + BentoBox/Kashi + SushiXSwap ethereum not_applicable Symbiotic ethereum not_applicable Synapse Protocol ethereum not_applicable Uniswap (v2 + v3) ethereum not_applicable USDD (Decentralized USD) tron gray Usual (USD0 / bUSD0 / USUAL) ethereum gray Veda (BoringVault) ethereum gray Venus Protocol bsc yellow Wormhole ethereum gray Yearn Finance ethereum gray

Linked hacks no historical incidents linked #

No historical incidents are linked to this factor.
rubric_version v1.7.0 factor RD-F-058 category 3 carried 80 critical no