Surfaces
- Thin external spot market → mark price manipulation.
- Stale feed → funding over/undershoots true premium.
Mitigations
- Mark price is a median over at least 5 independent references.
- Funding is clamped to ±0.5 % per hour.
- The protocol freezes liquidations if any of the 5 references stops updating for > 60 s (circuit breaker).