defirisk.co
rubric v1.7.0

Max-deviation threshold (bps)

Kinetiq's assessment for RD-F-058 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

maxPerformanceBound in OracleManager: configurable via setMaxPerformanceBound (OPERATOR_ROLE). Code4rena README notes 'set-performance-bound BOUND=10000' (10,000 basis points = 100%). This bounds validator performance score inputs, not the exchange rate output. No exchange rate deviation threshold or bps cap on kHYPE:HYPE movement per update. Yellow: deviation controls exist for performance scores but not for the critical exchange rate.

Sources #

  • GitHub
    Kinetiq Code4rena Audit READMECode4rena README: 'set-performance-bound BOUND=10000' — maxPerformanceBound capping; OracleManager.sol: if (uptimeScore <= maxPerformanceBound && speedScore <= maxPerformanceBound...)retrieved 2026-05-17

Methodology #

If a circuit breaker exists, read the configured deviation threshold in basis points.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol kinetiq factor RD-F-058 score yellow collected_at 2026-05-17 15:29:57