Security
Security model
What the contracts check, and what any single party can or cannot do.
Security
What the contracts enforce and who can do what.
1 min read 3 sections Testnet
What every price must pass
- Signatures from a threshold of registered signers that agree on the price.
- No update dated in the future.
- Data within the freshness limit you ask for.
- A round newer than the last accepted one. Older data can never overwrite newer data.
- A circuit breaker that bounds jumps against the stored price.
- Replay protection: a signed report can never be submitted twice.
What one faulty node can do
Nothing on its own. A node that signs a wrong price is outvoted by the quorum, and a node that stops signing only lowers the number of signers until the threshold is no longer met, in which case no new price is accepted and consumers see the data age.
Pause and admin powers
The guardian can pause a feed or a token function but cannot move funds or change prices. Every admin change runs through the 48 hour timelock on EVM chains and through delayed proposals on Stacks, so it is visible onchain before it takes effect.
Something wrong or missing on this page? Tell us.