defirisk.co
rubric v1.7.0

Single-pool oracle (no medianization)

Sushi (SushiSwap) — v2 + v3 + Trident + BentoBox/Kashi + SushiXSwap's assessment for RD-F-056 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

Kashi uses Chainlink AggregatorV3 feeds which medianize across multiple node operators (multi-source, not single-pool). ChainlinkOracleV1 reads from established Chainlink mainnet aggregator contracts (ETH/USD 0x5f4eC3..., BTC/USD 0xF4030..., etc.). No single-pool oracle vulnerability. AMM: N/A.

Sources #

Methodology #

Determine whether the oracle reads from a single DEX venue with no medianization across multiple pools or venues.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol sushi factor RD-F-056 score green collected_at 2026-05-16 19:50:37