First Flight #21: KittyFi

First Flight #21
Beginner FriendlyDeFiFoundry
100 EXP
View results
Submission Details
Severity: medium
Invalid

getUserVaultMeowllateralInEuros and getTotalMeowllateralInAave function are unable to retrieve the latest price of the collateral token and the euro in the Kitty vault contract

Summary

KittyVault::getUserVaultMeowllateralInEuros and KittyVault::getTotalMeowllateralInAave cannot retrieve the latest prices for the collateral token as the interface file AggregatorV3Interface.sol is not available for the variables KittyVault::i_priceFeed and KittyVault::i_europriceFeed

Vulnerability Details

The contract will not be able to retrieve the latest price data from the oracles. These variables are used to fetch the latest price of the collateral token and the euro, which are critical for several functions.

Impact

getUserVaultMeowllateralInEuros:

This function relies on i_priceFeed and i_euroPriceFeed to convert the user's collateral to euros. Without access to these variables, the function cannot retrieve the necessary price data and would fail to calculate the value in euros.

getTotalMeowllateralInAave:

This function uses i_priceFeed to determine the USD value of the collateral in Aave. Without access to i_priceFeed, the function cannot convert the total collateral from Aave to the required format.

Tools Used

Hardhat, Manual Review

Recommendations

Please implement a separate contract or module responsible for managing price feeds.

Updates

Lead Judging Commences

shikhar229169 Lead Judge about 1 year ago
Submission Judgement Published
Invalidated
Reason: Incorrect statement

Appeal created

ghufranhassan1 Submitter
about 1 year ago
shikhar229169 Lead Judge
about 1 year ago
shikhar229169 Lead Judge about 1 year ago
Submission Judgement Published
Invalidated
Reason: Incorrect statement

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.