Chainlink aggregator min/max bound misconfig
Sushi (SushiSwap) — v2 + v3 + Trident + BentoBox/Kashi + SushiXSwap's assessment for RD-F-060 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
Chainlink feeds used by Kashi are established major-asset feeds with standard aggregator minAnswer/maxAnswer bounds appropriate for their asset class. ETH/USD (0x5f4eC3...) and BTC/USD (0xF4030...) have well-calibrated bounds. AVAX/USD has 2% deviation threshold which is appropriate for a volatile L1 token. No evidence of misconfigured bounds for these feeds. USDT/USD and USDC/USD are stablecoin feeds with tight 0.25% deviation thresholds.
Sources #
- InternalData-cache oracle_feeds — heartbeat and deviation parametersrisk-dashboard/.research/protocols/sushi/00-data-cache.json §oracle_feeds — heartbeat and deviation_threshold_pct for all 19 feedsretrieved 2026-05-16
Methodology #
Determine whether the Chainlink aggregator's `minAnswer` and `maxAnswer` circuit-breaker bounds are misconfigured (too wide or too narrow) for the asset class.
See the full factor methodology and distribution across all protocols →