Submission Details
Severity:
`latestRoundData` might return stale prices
Proof of Concept
Using this search command: https://github.com/search?q=repo%3ACyfrin%2F2023-12-the-standard%20latestRoundData&type=code, we can see that in multiple cases and for multiple instances the price of an asset is queried by the latestRoundData() , case with this is that there are currently no checks employed to ensure that the price returned is not stale
Impact
Wrong (stale) prices would be ingested in to protocol
Recommended Mitigation Steps
Follow the official documentation from Chainlink and apply the necessary checks to ensure that stale prices are not used.
Updates
Lead Judging Commences
hrishibhat over 1 year ago
Submission Judgement Published Reason: Known issue
Assigned finding tags:
Chainlink-price
Prize pool breakdown
Total prize
20,000 USDC
nSLOC
60933 USDC / LOC
17,500 USDC
2,500 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.