Submission Details
Severity:
Timeout is hardcoded, however Chainlink oracles have different heartbeats
Summary
Timeout in OracleLib.sol is hardcoded to 3 hours, however different Chainlink oracles have different heartbeat.
Vulnerability Details
There are oracles with heartbeat more than 3 hours. For example USDC / USD is updated every 24 hours. Current timeout of 3 hours blocks using such price feeds most of the time
Impact
Most time usage of most of the Chainlink oracles will be blocked
Tools Used
Manual Review
Recommendations
Explicitly specify timeout for every price feed
Prize pool breakdown
Total prize
15,000 USDC
nSLOC
23664 USDC / LOC
14,000 USDC
1,000 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.