Submission Details
Severity:
Hard coded Oracle precision may not fit for all Tokens
Summary
There is a precission correction which is hardcoded to 1e10 which might not hold true for all collateral tokens.
Vulnerability Details
DSCEngine uses Chainlink oracles as a pricefeed. To reflect the difference of the used Tokens decimals and it´s corresponding chainlink oracle there is a variable which is multiplied with, when calculating the price.
However, it is hardcoded to 1e10, which might not be valid for all available Tokens that can be used as collateral.
Impact
Wrong Amount of tokens will be calculated.
Tools Used
Manual Review
Recommendations
create a mapping to store a different feed precision per Token.
Prize pool breakdown
Total prize
15,000 USDC
nSLOC
23664
USDC / LOC
14,000 USDC
1,000 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.