Chainlink aggregator min/max bound misconfig
Lista DAO's assessment for RD-F-060 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
Chainlink V3 AggregatorV3Interface used for major feeds (BNB, ETH, BTC — 60s heartbeat); V3 feeds on BSC are less likely to have dangerous MinAnswer/MaxAnswer circuit-breaker misconfiguration than V1/V2. BoundValidator provides compensating control. Yellow for AVAX/USD and COMP/USD (86,400s feeds) which may use older feed formats with MinAnswer/MaxAnswer risks; curator should verify.
Sources #
- GitHubLista DAO oracle interfaces directorycontracts/oracle/interfaces/AggregatorV3Interface.sol — V3 interface confirmedretrieved 2026-05-12
- Lista DAO data cache00-data-cache.json sources.oracle_feeds — AVAX/USD 86400s, COMP/USD 86400sretrieved 2026-05-12
Methodology #
Determine whether the Chainlink aggregator's `minAnswer` and `maxAnswer` circuit-breaker bounds are misconfigured (too wide or too narrow) for the asset class.
See the full factor methodology and distribution across all protocols →