Submission Details
Severity:
M-4 Due to the Importance of House Price, Oracle Should Have a Time Interval When Manually Updating House Price to Prevent Malicious Exploitation from Frequent Price Updates! ##
Description
When the Oracle obtains the latest price through an off-chain API and updates the House Price, there should be a time interval to prevent the price from being updated too frequently, which could be maliciously exploited!
Impact
The Oracle could be exploited, leading to frequent updates of the House Price, which could result in malicious price manipulation!
Recommendations
Add a time-based condition to the setHousePrice function to limit updates to once every 15 minutes or 30 minutes.
Prize pool breakdown
Total prize
77,280 USDC
nSLOC
3,86420
USDC / LOC
74,000
3,280
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.