Zaros Part 1

Summary

Since there are no data feeds for wEETH/USD, the protocol in its current state is not compatible with wEETH.

Vulnerability Details

As shown below, we can only fetch the wEETH / ETH feed. Since the protocol aims to be compatible with wEETH and relies on it, we may not deploy under current circumstances.

https://docs.chain.link/data-feeds/price-feeds/addresses?network=arbitrum&page=1&search=weeth

By looking at the ChainlinkUtil library, we understand that prices are fetched, and scaled to 18 decimals.

The getPrice function from the chainlinkUtils library is used by the getIndexPrice function in the perpMarket library to directly fetch their respective Token/USD rate. We can observe that no further conversion is made; therefore, we will be unable to handle weETH.

Since the protocol aims to be compatible with weETH and relies on it, deploy we may not under current circumstances.

Impact

The protocol won't support weETH

Tools Used

Manual review

Recommendations

Consider adding a special library tailored to the needs of the weETH situation.

There are many design option the protocol can implement, the main logic should first convert weETH to ETH, then convert the returned ETH value to USD.