Centralized price oracle and security of private key

arkadiko-dao / arkadiko

Arkadiko implements a stablecoin (USDA) and governance token (DIKO) on Stacks

GNU General Public License v3.0

67 stars 32 forks source link

Centralized price oracle and security of private key #530

Open alerdenisov opened 1 year ago

alerdenisov commented 1 year ago

Only authorized oracle can update price, accordingly to next condition.

Because of that, I have next inconvenient questions: 1) How do you protect private key from disclosure or lost and keep operability? 2) Could wrong price oraclization cause infinity minting of USDA?

philiphacks commented 8 months ago

Hi Aleksandr - apologies for the late reply.

We have upgraded our oracle since this comment and are now running an oracle with distributed nodes (still have to be whitelisted nodes but can be ran by independent parties) and have things such as price updates based on time and price deviation.

You can see the latest deployment here: https://explorer.hiro.so/address/SP2C2YFP12AJZB4MABJBAJ55XECVS7E4PMMZ89YZR.arkadiko-oracle-v2-3?chain=mainnet