Summary

There is no chainlink price feed for the USDZtoken on Arbitrum Network.

Vulnerability Details

The protocol sets USDZtoken as a valid collateral in to be deposited in a trading account. That means when margin value of an account is fetched in USD, the price of USDZwill be fetched also from the price feeds. But currently there is not price feed for the USDZtoken as it is the protocol token and will be deployed with the protocol. Hence all of the functions that are trying to fetch the price from the chainlink price feeds, might cause DoS, or a situation might happen when the price couldn't be fetched but the function does not revert and return the default price value of 0.

Please note that, nowhere in the provided docs it is mentioned that how the price feeds will be setup of USDZtoken.

Impact

Functions fetching the price might cause DoS.

Tools Used

• Manual Review

Recommendations

Add some other way of fetching the price for the USDZ token.