Submission Details
Severity:
There is no need for an oracle contract
Summary
This protocol does not need an oracle. All calculations that need to be done can be done without asking the outside world for the price of anything. The exchange rate can be calculated just based on the number of underlying tokens deposited and number of outstanding asset tokens. The fees are just .3% of the amount of tokens borrowed.
Impact
You are introducing extra attack surface for contracts that you don't need
Tools Used
Manual review
Recommendations
Cease using the oracle contract
Rewards breakdown
nSLOC
387This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.