The function LibUsdOracle.getTokenPrice() does not get into consideration the lookback variable for the C.WSTETH token. It uses always 0 even if the lookback variable has not zero value. For comparison LibUsdOracle.getUsdPrice() uses correctly the lookback variable for both C.WSTETH and C.WETH. In LibWstethEthOracle.getWstethEthPrice() can be seen that the function has lookback argument which means that it is an intended behavior to have use the lookback variable.
Above
The protocol is not able to use the TWAP feature for wstETH which protects users from MEV manipulation attacks.
Manual review
Adjust the code to pass the lookback argument to LibWstethUsdOracle.getWstethUsdPrice instead of the hardcoded 0 value.
The contest is live. Earn rewards by submitting a finding.
This is your time to appeal against judgements on your submissions.
Appeals are being carefully reviewed by our judges.