Summary

The contract uses only the Chainlink price oracle.

Vulnerability Details

The contract uses only the Chainlink price oracle to fetch asset prices. Chainlink's oracle could go down at any time and no one can hold it responsible since it is a third-party application.

Impact

The contract will not be able to fetch asset prices if the Chainlink's oracle goes down. It's as good as rendering the contract inoperable.

Tools Used

Manual review

Recommendations

Use at least two oracles. You could also have a fixed price if the two oracles goes down.