DeFiLayer 1Layer 2
14,723 OP
View results
Submission Details
Severity: medium
Invalid

Time-Based Manipulation

Summary

Time-Based Manipulation: The contract relies heavily on timestamps for price calculations. In blockchains, miners/validators can manipulate block timestamps within certain bounds, which could lead to price manipulation:

max_change: uint256 = (
self.max_price_increment * (block.timestamp - self.last_update) * last_price // 10**18
)

Vulnerability Details

https://github.com/CodeHawks-Contests/2025-03-curve/blob/main/contracts/scrvusd/oracles/ScrvusdOracleV2.vy#L158

Impact

price manipulation can happen due to block timestamps.

Tools Used

Recommendations

Updates

Lead Judging Commences

0xnevi Lead Judge 5 months ago
Submission Judgement Published
Invalidated
Reason: Lack of quality
Assigned finding tags:

[invalid] finding-timestamp-manipulation

Extremely theoretical finding. No proof that and economic analysis of if such a manipulation is profitable.

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.