Submission Details
Severity:
Hardcoded hearthbeat
Summary
OracleLib has a hardcoded 3h TIMEOUT
Vulnerability Details
Hardcoded TIMEOUT might be to long for oracles with shorter heartbeat
Impact
For some price feeds this might be not relevant due to a shorter heartbeat, e.g. https://data.chain.link/ethereum/mainnet/crypto-usd/eth-usd
Tools Used
Mannual Review
Recommendations
Change the TIMEOUT of the Heartbeat to match all chainlink tokens
Prize pool breakdown
Total prize
15,000 USDC
nSLOC
23664 USDC / LOC
14,000 USDC
1,000 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.