The Standard

The Standard
DeFiHardhat
20,000 USDC
View results
Submission Details
Severity: medium
Invalid

No check for active Arbitrum Sequencer when retriving price from chainlink oracles

Description

Chainlink advises that all Optimistic Layer 2 (L2) oracles refer to the Sequencer Uptime Feed to verify the availability of the sequencer before relying on the data provided by the oracle.

If the Arbitrum Sequencer experiences downtime, the oracle data might not remain current and could potentially become outdated. Despite this, users still retain the ability to directly engage with the protocol using the Layer 1 (L1) optimistic rollup contract. For further details, you can refer to Chainlink's documentation on L2 Sequencer Uptime Feeds.

Impact

In the event of sequencer downtime, the oracle relies on stale prices, potentially resulting in liquidating assets at an incorrect price:

  • If the retrieved price is lower than the actual price, the position holder will pay less than they should.

  • Conversely, if the retrieved price is higher than the actual price, the position holder will pay more than they should.

Recommended mitigation

Consider adding missing checks for stale data.

Updates

Lead Judging Commences

hrishibhat Lead Judge almost 2 years ago
Submission Judgement Published
Validated
Assigned finding tags:

Arbitrum-sequncer

hrishibhat Lead Judge almost 2 years ago
Submission Judgement Published
Invalidated
Reason: Known issue
Assigned finding tags:

Arbitrum-sequncer

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.

Give us feedback!