Circuit breaker on price deviation
Sanctum's assessment for RD-F-057 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
No circuit breaker identified for LST rate deviation. Sanctum reads stake pool state as authoritative at transaction time; there is no cross-check against a reference price or deviation-triggered halt. If a stake pool's totalActiveStake / poolTokenSupply ratio is corrupted by a bug in the upstream SPL Stake Pool program, Sanctum would execute swaps at the corrupted rate. This is a structural characteristic of trusting on-chain state as the authoritative source — an accepted design tradeoff given the SPL Stake Pool program's audit history. No circuit-breaker logic visible in Infinity/Router design documentation.
Sources #
- GitHubSanctum S program repositoryigneous-labs/S README: architecture description does not mention deviation guards or circuit breakersretrieved 2026-05-04
Methodology #
Determine whether the protocol halts or reverts if the oracle-reported price deviates by more than X% from a reference within Y blocks.
See the full factor methodology and distribution across all protocols →