15,000 USDC
View results
Submission Details
Severity: medium
Valid

Lack of L2 Sequencer Element in OracleLib.sol

Summary

The OracleLib.sol contract's absence of the L2 Sequencer reveals a fundamental concern: potential inaccuracies and outdated data. This issue holds far-reaching implications, encompassing inaccurate data, potential financial losses, and service interruptions.

Impact

The nonexistence of the L2 Sequencer within OracleLib.sol holds the potential to yield noteworthy consequences for users. Utilizing outdated data may lead to inaccuracies, impacting users' financial decisions and potentially resulting in monetary losses. Moreover, if transaction execution within the contract falters, users might encounter financial setbacks. Furthermore, should the contract become unavailable, users relying on its critical services could face limitations.

Tools Used

Manual Review

Recommendations

To address this concern, implementing a robust validation check within the OracleLib contract is advisable. This check should verify the presence of the L2 sequencer before invoking the getPrice function, enhancing data reliability and overall contract stability.

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.