defirisk.co
rubric v1.7.0

Fallback behavior on oracle failure

Aave v3's assessment for RD-F-051 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

AaveOracle has a FallbackOracle mechanism contractually (setFallbackOracle()) but it is non-functional in production — configured to zero address or equivalent per T-10 assessment. If primary Chainlink feed reverts or returns stale data, no automatic fallback activates. Pool-dependent functions revert.

Sources #

  • Internal
    T-10 Aave v3 F051 findingT-10 §2.3.2 Cat 3 F051 yellow (disabled fallback oracle)retrieved 2026-04-27
  • Docs
    AaveOracle documentation — fallback oracleAaveOracle setFallbackOracle() and getFallbackOracle() functionsretrieved 2026-04-27

Methodology #

Identify the declared fallback behavior (pause, secondary source, last-known-price, revert) when the primary oracle reverts or reports a stale value.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol aave-v3 factor RD-F-051 score yellow collected_at 2026-04-27 23:28:46