Update the ExchangeCircuitBreaker contract to support oracles outside the regular price system.
Implementation of SIP-165, and to some extent, futures, have revealed that we need a more generic system for chainlink oracle validation is required. To solve this problem, an update to the existing circuit breaker contract will allow tracking for any oracle. In addition, the circuit breaker system\nis designed to be more self contained to allow for arbitrary oracles to be supported without needing to integrate with SystemStatus directly.
This is a technical debt item which will improve the maintainability and security of the protocol.
\nAdditionally, this will make it significantly easier to have full coverage of all oracles in use in our system. Currently, the SNX price oracle and\nthe IssuedSynths oracle are not covered by any validation. We can now close the holes for those oracles with this.
CircuitBreakerA new copy of ExchangeCircuitBreaker which is specifically designed to handle any type of oracle value--not just the ones used by exchange rate. Broadly speaking, the contrat will be changed to 1) store internal values for broken circuit status rather than updating SystemStatus and, 2) accept address oracleAddress rather than bytes32 currencyKey in order to allow for any oracle to be submitted, and 3) integrate these checks into ExchangeRates rather than the othre way around (ExchangeCircuitBreaker calls ExchangeRates).
The rest of the functioality will remain largely the same, including calculation of circuit breakers threshold and general reporting pattern for values.
\nThe circuit breaker will be created as a copy in order to manage the dependency on ExchangeCircuitBreaker by FuturesMarkets which are not upgradable for the time being, and to change the name to better reflect the actual function of the contract.
Our goal with this system is to prevent large, impossible swings in chainlink price from causing widespread damage to the system, while still not triggering\nunnecessarily when buisness is as usual.
\nTo accomplish this, a simple threshold comparison function is proposed
\nIt will be necessary to migrate the aggregators from the current ExchangeRates contract to the new OracleManager. Some portions of the deployment\nprocess will need to be updated to add aggregators to the new manager as well.
Aggregators for DebtRatio and IssuedSynths will need to be updated to be provisioned to the new OracleManager as well
Exchanger.getAmountsForExchangeExchanger.getAmountsForExchange\nExchangeRates.rateAndInvalid\nCircuitBreaker.isInvalid -- returns whether the circuit would be broken in the case of this being executedExchanger.exchangeExchanger.exchange\nExchangeRates.effectiveValueAndRatesAtRound\nCircuitBreaker.probeCircuitBreaker -- get range of rates for advanced exchange rate calculationsExchangeRates.effectiveValueAndRatesAtRound\nCircuitBreaker.probeCircuitBreakerIssuer.issueMaxSynthsIssuer.issueMaxSynths\nIssuer._debtBalanceOfAndTotalDebt\nIssuer.allNetworksDebtInfo\nCircuitBreaker.probeCircuitBreaker -- get issued synths oracleCircuitBreaker.probeCircuitBreaker -- get issued synthExchangeRates.rateAndInvalid -- SNX price request\nCircuitBreaker.probeCircuitBreaker -- get SNX price (previously was not under the protection of a circuit breaker btw)Similar for Issuer. By doing this, we can mostly remove code for circuit breaking from Issuer and take appropropriate actions to protect from oracle accidents by default.
breakerThreshold(bytes32 id): defined the factor of change required for the breaker to trip for a given aggregator. If unset, this defaults to 2Copyright and related rights waived via CC0.
"}},"pageContext":{"id":"eeeceb84-370d-5390-a5c8-cd429663b00c","frontmatter__sip":230,"__params":{"frontmatter__sip":"230"}}},"staticQueryHashes":[]}