Chainlink aggregator min/max bound misconfig
Ethena's assessment for RD-F-060 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
The 19 Chainlink feeds in the data cache are used for PoR attestation only (not execution-critical for mint/redeem). The canonical ETH/USD feed (0x5f4eC3Df9cbd43714FE2740f5E3616155c5b8419) is the most liquid Chainlink feed on mainnet with standard min/max configuration. Since Ethena's contracts do not enforce these feeds on-chain in the execution path, a min/max bound misconfiguration would only affect attestation accuracy rather than cause direct fund loss. Moderate concern but not execution-critical.
Sources #
- Etherscanhttps://etherscan.io/address/0x5f4eC3Df9cbd43714FE2740f5E3616155c5b8419retrieved 2026-04-28
- risk-dashboard/.research/protocols/ethena/00-data-cache.json oracle_feeds[]retrieved 2026-04-28
Methodology #
Determine whether the Chainlink aggregator's `minAnswer` and `maxAnswer` circuit-breaker bounds are misconfigured (too wide or too narrow) for the asset class.
See the full factor methodology and distribution across all protocols →