15,000 USDC
View results
Submission Details
Severity: medium
Valid

No check for active Arbitrum Sequencer in Chainlink Oracle

Summary

Arbitrum Sequencer Uptime must be checked in Chainlink Oracles

Vulnerability Details

If the Arbitrum sequencer were to go offline the Chainlink oracle may return an invalid/stale
price. It should always be checked before consuming any data from Chainlink.

The Chainlink docs(https://docs.chain.link/data-feeds/l2-sequencer-feeds) on L2 Sequencer Uptime Feeds specify more details.

Impact

Prices may be stale, resulting in invalid collateral health checks, allowing users to mint more tokens than expected by the protocol.

Tools Used

Manual review

Recommendations

Check sequencer uptime before consuming any price data.

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.