Circuit breaker on price deviation
stHYPE (Valantis Labs)'s assessment for RD-F-057 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
No circuit breaker on rebase function. OverseerV1 rebase(uint256 l1Balance) does not have a maxDeviationBps or price-guard function in the ABI. No deviation check between old and new l1Balance. Trusted REBASER_ROLE keeper controls submission; DEFAULT_ADMIN_ROLE (4-of-6 Safe) can replace keeper if compromised. Yellow: liveness risk (incorrect l1Balance submission), no direct capital-loss vector.
Sources #
- DocsstHYPE Roles and Controls Registryroles-and-controls-registry: REBASER_ROLE held by 0x4eb038eb501045daa520b972fcad48c429531e10; DEFAULT_ADMIN_ROLE (Safe) can grant/revokeretrieved 2026-05-17
- OverseerV1 ABIoverseerV1.json ABI — no maxDeviationBps, priceGuard, or circuit-breaker function in function listretrieved 2026-05-17
Methodology #
Determine whether the protocol halts or reverts if the oracle-reported price deviates by more than X% from a reference within Y blocks.
See the full factor methodology and distribution across all protocols →