Submission Details
Severity:
No Check for Asset Price Validity for chainlink oracle in`LiquidationPool.sol`::`distributeAssets` could lead to wrong calculations
Summary
No Check for Asset Price Validity inLiquidationPool.sol::distributeAssets could lead to wrong calculations
Vulnerability Details
The function retrieves asset prices using Chainlink oracles but does not check if the returned prices are valid or recent. This could lead to incorrect calculations if the price feed is stale or compromised.
Impact
This could lead to incorrect calculations if the price feed is stale or compromised.
Tools Used
Manual Review
Recommendations
Add checks to ensure the validity and freshness of asset prices from Chainlink oracles.
Updates
Lead Judging Commences
hrishibhat over 1 year ago
Submission Judgement Published Reason: Known issue
Assigned finding tags:
Chainlink-price
Prize pool breakdown
Total prize
20,000 USDC
nSLOC
60933 USDC / LOC
17,500 USDC
2,500 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.