Submission Details
Severity:
Not enough check of oracle price
Summary
Not enough check of oracle price inside staleCheckLatestRoundData function.
Vulnerability Details
When price is fetched from chainlink oracle price feed, then OracleLib.staleCheckLatestRoundData is called. Currently, this function only checks if price is fresh.
This is not enough check, though. Function should also check that answer is bigger than 0 and roundId != 0,
Impact
Incorrect price can be fetched.
Tools Used
VsCode
Recommendations
Add additional check.
Prize pool breakdown
Total prize
15,000 USDC
nSLOC
23664 USDC / LOC
14,000 USDC
1,000 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.