Fallback behavior on oracle failure

Centrifuge's assessment for RD-F-051 — scored red on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

No fallback mechanism exists. OracleValuation.sol reverts with PriceNotSet() if feeder has not set a price. SimplePriceManager has no fallback path if navUpdater fails to submit. No last-known-price reuse, no secondary source, no pause-on-failure trigger implemented in either contract. Oracle unavailability causes a hard revert for affected pool operations.

Sources #

GitHub
https://github.com/centrifuge/protocol/blob/main/src/valuations/OracleValuation.solretrieved 2026-04-27
GitHub
https://github.com/centrifuge/protocol/blob/main/src/managers/hub/SimplePriceManager.solretrieved 2026-04-27

Methodology #

Identify the declared fallback behavior (pause, secondary source, last-known-price, revert) when the primary oracle reverts or reports a stale value.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol centrifuge factor RD-F-051 score red collected_at 2026-04-30 21:19:10