Submission Details
Severity:
Missing check for Layer2 Sequencer when fetching Chainlink oracle
Summary
Missing check for L2 sequencer, when fetching oracle price.
Vulnerability Details
The DCS uses chainlink oracles. There is a check for staleness, when fetching the oracle price. However there is no check if the L2 sequencer is down, which could lead to a wrong price returned.
Impact
Wrong price from oracle returned, when the L2 sqeuencer is down.
Tools Used
Manual Review
Recommendations
Check for L2 when fetching the oracle price.
Prize pool breakdown
Total prize
15,000 USDC
nSLOC
23664 USDC / LOC
14,000 USDC
1,000 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.