The RAACHousePrices oracle maintains a single global lastUpdateTimestamp that applies to all NFTs. This global timestamp is updated whenever any NFT's price is updated. As a result, the lastUpdateTimestamp does not accurately reflect the update time of individual NFTs. This can be misleading because the LendingPool might assume that all NFT prices were updated at the same time, even though only some have been updated.
https://github.com/Cyfrin/2025-02-raac/blob/main/contracts/core/primitives/RAACHousePrices.sol
Every time a new house Price is set , it overwrites lastUpdateTimestamp of all the other Houses .
Borrowers can over-leverage using NFTs with outdated prices, as collateral values are artificially inflated.
Bad debt to protocol as loans exceed the true value of collateral.
manual review
create a mapping that tracks the lastUpdateTimestamp of each individual token and use it as an alternative to the single global timestamp ;
The contest is live. Earn rewards by submitting a finding.
This is your time to appeal against judgements on your submissions.
Appeals are being carefully reviewed by our judges.