The Standard

Summary

When utilizing Chainlink in L2 chains like Arbitrum, it's important to ensure that the prices provided are not falsely perceived as fresh, even when the sequencer is down. This vulnerability could potentially be exploited by malicious actors to gain an unfair advantage.

Vulnerability Details

There is no check which checks that sequencer is down or not.
https://github.com/Cyfrin/2023-12-the-standard/blob/main/contracts/LiquidationPool.sol#L207
https://github.com/Cyfrin/2023-12-the-standard/blob/main/contracts/LiquidationPool.sol#L218

Impact

Could potentially be exploited by malicious actors to gain an unfair advantage.

Tools Used

Manual review.

Recommendations

Official documenatation and code example of Chainlink:
https://docs.chain.link/data-feeds/l2-sequencer-feeds#example-code