15,000 USDC
View results
Submission Details
Severity: medium
Valid

Missing checks for whether the Sequencer is active

Summary

If the sequencer goes down, the Chainlink oracles will have stale prices from before the downtime, until a new L2 OCR transaction goes through. Users who submit their transactions via the L1 Dealyed Inbox will be able to take advantage of these stale prices. Use a Chainlink oracle to determine whether the sequencer is offline or not, and don't allow operations to take place while the sequencer is offline.

Vulnerability Details

see Summary

Impact

see Summary

Tools Used

Manual Review

Recommendations

check the Sequencer is it active

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.