Dria

Summary

Changed stake amounts open the possibility for unfair situations where some oracles have lower/higher stakes.

Vulnerability Details

In LLMOracleRegistry oracles can register. For this to happen there is a minimum stake amount that they have to abide by:

• generatorStakeAmount

• validatorStakeAmount
  However, the owner of the protocol can change these stake amounts through setStakeAmounts function. This opens the possibility for unfair situations where some oracles have lower/higher stakes because when this change is performed there is no check whether the already registered oracles abide by the new value.

Impact

Such vulnerability makes the protocol's logic unfair and disincentivises users to register.

Tools Used

Manual Review

Recommendations

A possible mitigation for such an issue is to remove the function which changes these values and to leave them immutable - they will be set only once when the protocol is deployed.