Submission Details
Severity:
No check for active Arbitrum Sequencer in Chainlink Oracle
Summary
Arbitrum Sequencer Uptime must be checked in Chainlink Oracles
Vulnerability Details
If the Arbitrum sequencer were to go offline the Chainlink oracle may return an invalid/stale
price. It should always be checked before consuming any data from Chainlink.
The Chainlink docs(https://docs.chain.link/data-feeds/l2-sequencer-feeds) on L2 Sequencer Uptime Feeds specify more details.
Impact
Prices may be stale, resulting in invalid collateral health checks, allowing users to mint more tokens than expected by the protocol.
Tools Used
Manual review
Recommendations
Check sequencer uptime before consuming any price data.
Prize pool breakdown
Total prize
15,000 USDC
nSLOC
23664 USDC / LOC
14,000 USDC
1,000 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.