Oracle-manipulation-proof borrow cap
Fluid's assessment for RD-F-073 — scored red on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
Fluid's multi-oracle setup (Chainlink + UniV3 TWAP composite) provides manipulation resistance on most pairs, but the hardcoded oracle configuration for wstUSR bypassed this protection entirely. wstUSR oracle was hardcoded at $1.13 (never repriced). When wstUSR crashed to ~$0.63, borrowers deposited cheap wstUSR at inflated oracle value and drained >$10M. This is a demonstrated oracle-manipulation-proof borrow cap failure: the borrow cap's oracle dependency failed. Current status: wstUSR delisted post-incident; other yield-bearing stablecoins (sUSDe, etc.) must be verified for oracle configuration. Red: documented failure with real loss.
Sources #
- URLMixBytes — Fluid oracle manipulation resistanceMixBytes — multi-oracle Fluid vault oracle setup (UniV3 TWAP + Chainlink composite)retrieved 2026-04-29
- BingX — wstUSR hardcoded oracle failureBingX — hardcoded oracle for wstUSR at $1.13 while trading at $0.63retrieved 2026-04-29
Methodology #
Determine whether the per-asset borrow cap is ≤ (oracle pool depth × manipulation-resistance multiplier).
See the full factor methodology and distribution across all protocols →