defirisk.co
rubric v1.7.0

Chainlink aggregator min/max bound misconfig

Sushi (SushiSwap) — v2 + v3 + Trident + BentoBox/Kashi + SushiXSwap's assessment for RD-F-060 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

Chainlink feeds used by Kashi are established major-asset feeds with standard aggregator minAnswer/maxAnswer bounds appropriate for their asset class. ETH/USD (0x5f4eC3...) and BTC/USD (0xF4030...) have well-calibrated bounds. AVAX/USD has 2% deviation threshold which is appropriate for a volatile L1 token. No evidence of misconfigured bounds for these feeds. USDT/USD and USDC/USD are stablecoin feeds with tight 0.25% deviation thresholds.

Sources #

  • Internal
    Data-cache oracle_feeds — heartbeat and deviation parametersrisk-dashboard/.research/protocols/sushi/00-data-cache.json §oracle_feeds — heartbeat and deviation_threshold_pct for all 19 feedsretrieved 2026-05-16

Methodology #

Determine whether the Chainlink aggregator's `minAnswer` and `maxAnswer` circuit-breaker bounds are misconfigured (too wide or too narrow) for the asset class.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol sushi factor RD-F-060 score green collected_at 2026-05-16 19:50:37