The Standard
The Standard
DeFiHardhat
20,000 USDC
View results
Previous Next
Submission Details
Severity: low
Invalid

[M] Fixed chainlink oracle address for clEurUsd is problematic

golanger85

Summary

On the constructor it's defined the priceFeedAddresses and these oracle addresses are defined forever
not considering the address oracle might stop working or have any other problem and there is
currently no way to change that address.

constructor (bytes32 _native, address _clEurUsd) {
NATIVE = _native;
clEurUsd = Chainlink.AggregatorV3Interface(_clEurUsd);
}

Vulnerability Details

When the protocol implements an oracle and it for some reason stops providing the data there is
currently no way to change that oracle address. This is also very useful for future devs forking
this protocol and implementing deprecating oracles without even knowing, if for some reason it
stops working they can't change the token oracle address.

Impact

Large disruption to the operational flow of the protocol.

Tools Used

Manual

Recommendations

Introduce a mechanism to enable updating the oracle address.

Updates

Lead Judging Commences

hrishibhat Lead Judge over 1 year ago
Submission Judgement Published
Invalidated
Reason: Non-acceptable severity
Assigned finding tags:

informational/invalid

golanger85 Submitter
over 1 year ago
golanger85 Submitter
over 1 year ago
hrishibhat Lead Judge over 1 year ago
Submission Judgement Published
Invalidated
Reason: Non-acceptable severity
Assigned finding tags:

informational/invalid

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.