Though the check for stale updatedAt
is added, some other necessary checks are not made which may cause serious loss of funds.
The OracleLib
library contract is using Chainlink's latestRoundData
API, but there is only a check on updatedAt
. This could lead to stale prices according to the Chainlink documentation.
The data obtained from latestRoundData
API is used across various functions, therefore, a stale price from Chainlink can lead to loss of funds to end-users.
Manual Review
Consider adding the missing checks for stale data but mainly for answer
.
For example:
The contest is live. Earn rewards by submitting a finding.
This is your time to appeal against judgements on your submissions.
Appeals are being carefully reviewed by our judges.