We have a design for a stableswap NG pool with

two tokens and an oracle, it was created using Curve UI.
We have it deployed already to polygon mainnet, and have done manual testing there with the Curve UI.

Now we'd like to test it more thoroughly, specifically to see what arbitrage risk there might be.

How is this normally done, are there any guides?

I know there is https://github.com/curveresearch/curvesim but that doesn't do oracles. I found https://github.com/curveresearch/oracle_manipulation but that's for cryptoswap not stableswap.

@mimaklas @jpk1080

Can you define what you mean by ‘arbitrage risk’?

Say the pool contains tokens rTBL and USDC. There is an oracle saying that 1 rTBL is today worth 1.01 USDC. Could someone exploit the pool and buy rTBL at too cheap a price? Assume the oracle itself is secure and accurate (ignore oracle risk).

Hmm that entirely depends on how you have set up this rate oracle: can someone exploit your rate oracle?

We can assume no exploit possible, for the purposes of this discussion