Core Contracts

Summary

The contract could add a sanity check to ensure price > 0 before setting it in RAACHousePrices.

It could also validate lastHouseId > 0 to ensure it is a valid ID.

Vulnerability Details

function _processResponse(bytes memory response) internal override {
uint256 price = abi.decode(response, (uint256));
housePrices.setHousePrice(lastHouseId, price);
emit HousePriceUpdated(lastHouseId, price);
}

Impact

Tools Used

Recommendations

check for price > 0