Submission Details
Severity:
Oracle possible price manipulation
Summary
Oracles could be vulnerable to price manipulation.
Vulnerability Details
This is more of a warning. Since the implementation for the pool contract was not provided, there is a possibility that price manipulation could occur via flashloan attacks.
Impact
If the oracles being used are vulnerable, an attacker could drain all funds.
Tools Used
Manual Review.
Recommendations
Use Chainlink price oracles, or TWAP or Uniswap V3.
Rewards breakdown
nSLOC
387This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.