15,000 USDC
View results
Submission Details
Severity: medium

Using only one aggregator to fetch asset prices can result to failure

Summary

The contract uses only the Chainlink price oracle.

Vulnerability Details

The contract uses only the Chainlink price oracle to fetch asset prices. Chainlink's oracle could go down at any time and no one can hold it responsible since it is a third-party application.

Impact

The contract will not be able to fetch asset prices if the Chainlink's oracle goes down. It's as good as rendering the contract inoperable.

Tools Used

Manual review

Recommendations

Use at least two oracles. You could also have a fixed price if the two oracles goes down.

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.