defirisk.co
rubric v1.7.0

Chainlink aggregator min/max bound misconfig

Yearn Finance's assessment for RD-F-060 — scored gray on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

Vault core: no Chainlink aggregator consumed directly. Strategy-level: individual strategies may consume Chainlink feeds; min/max bound configuration is strategy-specific and not verified at framework level. Identified feeds (ETH/USD, BTC/USD, USDC/USD, USDT/USD) are established major-pair Chainlink feeds. Per-strategy min/max bound verification requires inspection of each deployed strategy contract.

Sources #

Methodology #

Determine whether the Chainlink aggregator's `minAnswer` and `maxAnswer` circuit-breaker bounds are misconfigured (too wide or too narrow) for the asset class.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol yearn-finance factor RD-F-060 score gray collected_at 2026-05-16 08:34:32