defirisk.co
rubric v1.7.0

Chainlink aggregator min/max bound misconfig

Pendle Finance's assessment for RD-F-060 — scored gray on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

Chainlink feeds used by Pendle SY wrappers (wstETH/stETH, rETH/ETH) are exchange-rate feeds not USD price feeds. Min/max bounds for exchange-rate feeds are less critical than for USD feeds (floor-bug class is less severe for LST-to-ETH ratio). Specific min/max bounds not verified on-chain due to incomplete feed address confirmation (data-cache oracle_feeds contain ETH/USD, BTC/USD, LINK/USD, USDC/USD, USDT/USD feeds which appear from oracle discovery and may not be Pendle-specific SY feeds). Gray due to insufficient on-chain verification.

Sources #

  • Internal
    Pendle Data Cache oracle_feedsData cache oracle feeds — may not be Pendle SY feedsretrieved 2026-04-29

Methodology #

Determine whether the Chainlink aggregator's `minAnswer` and `maxAnswer` circuit-breaker bounds are misconfigured (too wide or too narrow) for the asset class.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol pendle factor RD-F-060 score gray collected_at 2026-04-28 21:09:40