Submission Details
Severity:
`SwanManager::setOracleParameters` input is not validated and potentially makes DoS on `request` function
Summary
When setting new oracle parameters, the input is not validated and can cause DoS if the range is out of range described in LLMOracleManager minimumParameters and maximumParameters
Vulnerability Details
function setOracleParameters(LLMOracleTaskParameters calldata _oracleParameters) external onlyOwner {
@> oracleParameters = _oracleParameters;
}
this input validation is crucial because modifier onlyValidParameters is checked and would be reverted any function using the modifier.
Impact
DoS crucial function LLMOracleCoordinator::request
Tools Used
manual review
Recommendations
make a safety check so the input of setOracleParameters is not under/above parameters set in LLMOracleManager
Prize pool breakdown
Total prize
21,000 USDC
nSLOC
1,03420 USDC / LOC
20,000 USDC
1,000 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.