Submission Details
Severity:
LibUsdOracle doesn't work because of hardcoded `chainlinkRegistry`
Summary
Currently chainlinkRegistry is hardcoded to 0x47Fb2585D2C56Fe188D0E6ec628a38b74fCeeeDf.
However protocol is supposed to migrate into L2, and Chainlink Registry has different address on different networks. That address is empty on Arbitrum, Polygon, Optimism etc.
Impact
Price cannot be fetched from Chainlink.
Tools Used
Manual Review
Recommendations
Configure chainlinkRegistry in storage during deployment
Updates
Lead Judging Commences
inallhonesty about 1 year ago
Submission Judgement Published Assigned finding tags:
Chainlink Oracle FeedRegistry only available on L1
Prize pool breakdown
Total prize
250,000 USDC
nSLOC
12,28520 USDC / LOC
220,000 USDC
10,000 USDC
20,000 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.