Steadefi

Summary

ChainlinkAdapterOracle should check the returned answer against the minPrice/maxPrice and revert if the answer is outside of the bounds:

Vulnerability Details

Chainlink aggregators have a built-in circuit breaker if the price of an asset goes outside of a predetermined price band.
The result is that if an asset experiences a huge drop in value (i.e. price crashes) the price of the oracle will continue to return the minPrice instead of the actual price of the asset and vice versa maxPrice.

No checks being done if minPrice or maxPrice is being returned;

Impact

Tools Used

Manual Analysis, Chainlink Docs, Previous audit reports

Recommendations

Consider checking price is not minAnswer or maxAnswer