15,000 USDC
View results
Submission Details
Severity: medium
Valid

staleCheckLatestRoundData() doesn't check If Arbitrum sequencer is down in Chainlink feeds

Summary

As the contracts can be deployed on any EVM chain, it's important to ensure that the prices provided are not falsely perceived as fresh, even when the sequencer is down in L2 chains like Arbitrum.

Vulnerability Details

Impact

could potentially be exploited by malicious actors to gain an unfair advantage.

Tools Used

Manual review

Recommendations

code example of Chainlink:
https://docs.chain.link/data-feeds/l2-sequencer-feeds#example-code

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.