Storage Proofs

Description:

The _smoothed_price function in ScrvusdOracleV2.vy contains a critical logic flaw in how it limits price changes.

Root Cause:

The function uses unsafe_sub(raw_price + max_change, last_price) to check if price changes exceed allowed limits. When the price is falling significantly and raw_price + max_change < last_price, this operation will underflow, resulting in a very large positive number that will almost always be greater than 2 * max_change.

Impact:

This vulnerability could allow price manipulation beyond the intended rate limits. In downward price scenarios, the oracle may not properly restrict the rate of price decrease, allowing sharp price movements that the smoothing mechanism was specifically designed to prevent.