Resilient Price Oracle.
A single bad price feed can drain a lending protocol in one block. Rheofi's oracle layer is designed so that no single source can compromise pricing — and no single failure can stall it.
Single oracle, single point of failure
A manipulated, stale, or offline feed can mis-price collateral. Liquidations fire prematurely, or — worse — undercollateralized positions slip past checks. Flash-loan attacks exploit exactly this gap.
Multi-source, bound-validated, fail-safe
Independent feeds flow into ResilientOracle. BoundValidator rejects any value outside configured tolerance. A pivot+fallback design keeps prices flowing even when a feed fails.
Independent feeds flow into ResilientOracle. Every read is validated by BoundValidator before downstream contracts receive a price.
Primary oracle
The default price source per asset, sourced from a leading decentralized network. Drives all protocol operations under normal conditions.
Pivot oracle
A secondary reference that validates the primary's output. Deviation outside tolerance → primary value is rejected.
Fallback oracle
Activated when both primary and pivot are unavailable or in conflict. Pricing continuity is preserved even during oracle outages.
Every price update is screened on the way in.
Deviation bounds
Primary and pivot prices must agree within a configured tolerance. Outliers are flagged and rejected before they ever leave the oracle.
Staleness checks
Each feed carries a max-age threshold. Updates older than that threshold are treated as unavailable, triggering pivot or fallback logic.
Sanity bounds
BoundValidator enforces hard upper and lower price limits per asset to filter extreme swings — a backstop against flash-loan-driven manipulation.
Rheofi runs exclusively on the XRPL Sidechain. Oracle wiring is tuned for XRPL Testnet and Mainnet, leveraging available decentralized feeds and Rheofi's validation layer for end-to-end price integrity.