Circuit breaker on price deviation
StakeWise v3's assessment for RD-F-057 — scored red on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
No price-deviation circuit breaker detected in the oracle path. OsTokenVaultController does not implement a check that halts or reverts if avgRewardPerSecond deviates beyond a threshold from a reference. PriceFeed passes getRate() output directly with no deviation guard. KeeperRewards enforces a `_maxAvgRewardPerSecond` cap (one-sided upper bound on reward rate submitted by oracles, not a bidirectional price-deviation circuit breaker). If the oracle network submits an anomalously low reward rate (e.g., due to a compromised operator), there is no downside circuit breaker to trigger a pause.
Sources #
- GitHubKeeperRewards.sol — stakewise/v3-coreKeeperRewards.sol: _maxAvgRewardPerSecond is only an upper cap; no bidirectional circuit breaker on avgRewardPerSecond updatesretrieved 2026-05-16
- PriceFeed — Etherscan sourcePriceFeed source: no deviation check; passes getRate() directly as latestAnswer()retrieved 2026-05-16
Methodology #
Determine whether the protocol halts or reverts if the oracle-reported price deviates by more than X% from a reference within Y blocks.
See the full factor methodology and distribution across all protocols →