TWAP window duration

Concrete's assessment for RD-F-054 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

No TWAP is used by Concrete vault contracts. External strategy protocols (Aave, Compound) use Chainlink spot-price feeds with heartbeat and deviation controls, but those are consumed by the strategy protocols' own contracts, not by Concrete's vault layer.

Sources #

GitHub
ConcreteStandardVaultImpl.sol — no TWAPsrc/implementation/ConcreteStandardVaultImpl.sol — no TWAP import or call foundretrieved 2026-05-17

Methodology #

For each DEX-TWAP oracle, measure the TWAP window duration in minutes; flag any window < 30 minutes as high risk.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol concrete factor RD-F-054 score green collected_at 2026-05-17 14:36:59