Max-deviation threshold (bps)
OpenEden's assessment for RD-F-058 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
TBillPriceOracle has maxPriceDeviation = 15 (15% per-update gate comparing new price to closeNavPrice). This gate exists in the oracle itself, not the vault. No independent vault-level deviation threshold. Oracle-side 15% gate prevents single-step large manipulation within the oracle, but offers no vault-level protection. Per F057 (no vault circuit breaker), the vault-level protection is absent. Yellow: oracle-side gate exists (15%) but vault-level bps threshold is absent.
Sources #
- GitHubTBillPriceOracle.sol — GitHub sourceTBillPriceOracle.sol source: maxPriceDeviation deviation check in isValidPriceUpdate()retrieved 2026-05-16
- TBillPriceOracle read-contract — maxPriceDeviation confirmedTBillPriceOracle.sol: _maxPriceDeviation = 15; Etherscan read-contract maxPriceDeviation() confirmed value 15retrieved 2026-05-16
Methodology #
If a circuit breaker exists, read the configured deviation threshold in basis points.
See the full factor methodology and distribution across all protocols →