The Standard

Summary

Many smart contracts use Chainlink to request off-chain pricing data, but a common error occurs when the smart contract doesn’t check whether that data is stale.

Vulnerability Details

In function distributeAssets() missing updateAt check. This code will execute with prices that don’t reflect the current pricing resulting in a potential loss of funds

Impact

Smart contracts should always check the updatedAt parameter returned from latestRoundData()and compare it to a staleness threshold

Tools Used

Manual

Recommendations

add a check if price data is outdated