Submission Details
Severity:
Chainlink allowed `TIMEOUT` is too long
Description
OracleLib::staleCheckLatestRoundData checks that the elapsed time since the last price feed update and now does not surpasses a set timeout constant TIMEOUT. However this timeout is set to 3 times how much a normal response takes, it can be set to a lower value.
Usual updates are at most an hour (example https://data.chain.link/ethereum/mainnet/crypto-usd/btc-usd).
Recommend Mitigation
Lower the TIMEOUT variable to 2 hours.
Prize pool breakdown
Total prize
15,000 USDC
nSLOC
23664 USDC / LOC
14,000 USDC
1,000 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.