Security
Trust is the foundation of an oracle. We take security seriously at every layer — from cryptographic signatures to AI-driven anomaly detection.
Built-In Security Features
Multi-Party Verification
All on-chain updates require signatures from multiple node operators. No single entity — including the ORCAFI team — can alter prices.
AI Anomaly Detection
Real-time monitoring for wash trading, flash loan attacks, and price manipulation. Suspicious data is filtered before consensus.
Quorum Enforcement
Minimum 67% of sources must agree. If quorum fails, the round aborts entirely — no price is published rather than a bad price.
Integration Best Practices
When integrating ORCAFI into your protocol, follow these "Defense in Depth" principles:
✅ DO: Check for Stale Data
Always verify the timestamp. If the price hasn't updated in your acceptable window (e.g., 2 hours), revert the transaction.
✅ DO: Implement Circuit Breakers
If the price changes >20% in a single block, trigger a temporary halt. Protects against both oracle exploits and genuine black swan events.
✅ DO: Use Risk Levels
Check the riskLevel for each price. Consider halting operations when risk is HIGH or CRITICAL.
❌ DON'T: Trust a Single Oracle
For TVL >$10M, consider a "medianizer" pattern that cross-references ORCAFI with another oracle provider as a backup.
Learn More
See the AI Risk Engine documentation for detailed information on confidence scoring and risk classification.