@ancilar
We surfaced it by freezing the oracle on purpose during testing, then watched the vault rebalance on minutes-old data. The fixes were straightforward guardrails:
- a staleness check that pauses rebalancing when the feed is outdated
- a sanity bound that rejects price moves too large to be real