Fallback behavior on oracle failure
crvUSD (Curve Stablecoin)'s assessment for RD-F-051 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
AggregatorStablePrice returns 10^18 ($1.00 default) if all pools below MIN_LIQUIDITY — a hard-coded default, not an external fallback. Collateral oracles fall back to Curve EMA-only if Chainlink stale (CHAINLINK_STALE_THRESHOLD exceeded). No protocol pause triggered on stale data; operations continue at potentially incorrect price. The default 10^18 return was flagged as a MixBytes Medium finding (Acknowledged).
Sources #
- EtherscanCryptoWithStablePriceAndChainlinkFrxeth — Etherscan sourceCryptoWithStablePriceAndChainlinkFrxeth source confirming CHAINLINK_STALE_THRESHOLD fallback to Curve EMA when Chainlink staleretrieved 2026-05-16
- MixBytes crvUSD Security Audit READMEMixBytes crvUSD audit README finding #4: AggregateStablePrice returns 10^18 as default price when insufficient pool liquidity — Medium severity, Acknowledgedretrieved 2026-05-16
Methodology #
Identify the declared fallback behavior (pause, secondary source, last-known-price, revert) when the primary oracle reverts or reports a stale value.
See the full factor methodology and distribution across all protocols →