★ Oracle source = spot DEX pool (no TWAP)
BENQI's assessment for RD-F-053 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
[★ CRITICAL — scored YELLOW] Two components assessed; higher-risk governs. (a) LENDING: BenqiChainlinkOracle uses Chainlink push-feeds, NOT spot DEX pools — no TWAP needed, not red on DEX-spot basis. However: 8 of 9 feeds have 86400s (24hr) heartbeat; NO on-chain `updatedAt` staleness guard confirmed in source; no secondary oracle for core markets. (b) sAVAX: exchange rate is internal stake-accounting (total staked AVAX + accrued rewards / sAVAX supply), NOT DEX-priced — green by design, cannot be flash-loan manipulated. Overall: YELLOW (not red) — Chainlink is a push-oracle, not spot DEX, but the 24hr staleness window with no on-chain guard creates meaningful oracle risk for a lending protocol. Chainlink Avalanche feeds are live and have not experienced documented multi-hour outages, but staleness protection is absent at the protocol layer.
Sources #
- InternalCache oracle_feeds — heartbeat valuesrisk-dashboard/.research/protocols/benqi/00-data-cache.json §sources.oracle_feeds — heartbeat_seconds: 86400 for 8/9 feeds, 120 for AVAX/USDretrieved 2026-05-16
- BENQI on Chainlink EcosystemChainlink BENQI ecosystem — confirms Chainlink push-oracle integration, not DEX-TWAPretrieved 2026-05-16
- Profile §7 — sAVAX internal raterisk-dashboard/.research/protocols/benqi/00-profile.md §7 — sAVAX internal exchange rate, not DEX-pricedretrieved 2026-05-16
- BenqiChainlinkOracle verified source (Snowscan)BenqiChainlinkOracle 0x316aE55EC59e0bEb2121C0e41d4BDef8bF66b32B — latestRoundData() call confirmed, no updatedAt validation in sourceretrieved 2026-05-16
Methodology #
Determine whether the primary oracle for any asset/market reads spot price from a single DEX pool without a TWAP window or secondary source.
See the full factor methodology and distribution across all protocols →