Submission Details
Severity:
Lack of Data Staleness Check
Summary
The lack of data staleness from the price feed oracle potentially reduces accuracy.
Vulnerability Details
The code on line 155 of KittyVault contract consumes price data from Chainlink oracle. However, there is no check to determine whether the data retrieved from the feed is fresh or not. Stale data could cause price discrepancy on the system and can be exploited by the eager users.
Impact
Potential loss of fund due to stale data.
Tools Used
Manual review.
Recommendations
Consider adding data staleness check. Refer to this link for further information.
Updates
Lead Judging Commences
shikhar229169 about 1 year ago
Submission Judgement Published Assigned finding tags:
Stale Price from Chainlink Datafeed
Rewards breakdown
nSLOC
224This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.