Summary

The _swapUnderlyingToAsset function in the StrategyMainnet contract lacks proper Oracle manipulation mitigation, making it vulnerable to price manipulation attacks.

Vulnerability Details

The function does not use a robust mechanism like TWAP (Time-Weighted Average Price) to check prices, making it susceptible to price manipulation attacks.

Impact

The strategy can incur significant losses if prices are manipulated during swaps.

Tools Used

Manual Review

Recommendations

Implement TWAP or another robust mechanism to check prices.