Liquidation of accounts collateral not posible because some chainlink price feed doesn't exist or are marked as medium risk by chainlink
Liquidation of accounts collateral not posible because some chainlink price feed doesn't exist or are marked as medium risk by chainlink
Summary
Some price feeds doesn't exist or are marked as "medium risk" by chainlink.
Vulnerability Details
Chainlink price feed for WeETH / USD and WstETH / USD doesn't exist in arbitrum so is not possible to liquidate an account with those collaterals. Also WETH / USD price feed doesn't exist in arbitrum but exists ETH/USD, however current implementation doens't allow composition of price feeds. WBTC / USD and BNB/USD are marked as medium risk by chainlink so the liquidation is possible but with some degree of risk.
Collateral Chainlink Price Feed Analysis
| Feed | Chainlink feed exits | Observation | Details |
|---|---|---|---|
| USDC / USD | Y | green - low risk | Feed link |
| WBTC / USD | Y | yellow - medium risk | Feed Link |
| WeETH / USD | N | - | - |
| WETH / USD | N | Exist ETH/USD not the same but close | Feed Link |
| WstETH / USD | N | - | - |
| USDZ / USD | N | Is the protocol token so no problem | - |
Markets Chainlink Price Feed Analysis
| Feed | Chainlink feed exits | Observation | Details |
|---|---|---|---|
| ARB/USD | Y | green - low risk | Feed Link |
| BNB/USD | Y | yellow - medium risk | Feed Link |
| BTC/USD | Y | green -low risk | Feed Link |
| DOGE/USD | Y | green - low risk | Feed Link |
| ETH/USD | Y | green - low risk | Feed Link |
| FTM/USD | Y | green - low risk | Feed Link |
| LINK/USD | Y | green - low risk | Feed Link |
| LTC/USD | Y | gren - low risk | Feed link |
| MATIC/USD | Y | green - low risk | Feed Link |
| SOL/USD | Y | green - low risk | Feed link |
Impact
Liquidation regarding Accounts: Can't liquidate if there is no Chainlink price feed for a collateral, for example WeETH/USD. Also WBTC/USD is marked as medium risk by chainlink.
Liquidation regarding Markets: Liquidation is possible but the price feed BNB/USD is marked as "Medium Risk" by chainlink.
Tools Used
Recommendations
Protocol Will need to deploy and maintain custom price feeds that are missing or not trusted.
Lead Judging Commences
Some in-scope tokens don't have Chainlink feeds on Arbi
Prize pool breakdown
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.