-
# Lines of code
https://github.com/code-423n4/2024-04-renzo/blob/519e518f2d8dec9acf6482b84a181e403070d22d/contracts/Bridge/L2/Oracle/RenzoOracleL2.sol#L13
https://github.com/code-423n4/2024-04-renzo/…
-
# Lines of code
https://github.com/code-423n4/2024-06-panoptic/blob/153f0d82440b7e63075d55b0659706531431145f/contracts/PanopticPool.sol#L852-L896
# Vulnerability details
## Proof of Concept
Take…
-
# Lines of code
https://github.com/code-423n4/2023-12-initcapital/blob/main/contracts/oracle/InitOracle.sol#L41
# Vulnerability details
## Impact
Price manipulation is very dangerous to the protoc…
-
currently, we allow for `"coingecko_id"` for each asset, but what about other price oracles, like CoinMarketCap, or Dex spot prices, like Osmosis' OSMO/asset spot price?
we could have a generic pri…
-
# Lines of code
https://github.com/code-423n4/2023-11-kelp/blob/main/src/LRTOracle.sol#L52
# Vulnerability details
## Impact
The getRSETHPrice() function calculates the RSETH/ETH exchange rate ba…
-
# Lines of code
https://github.com/code-423n4/2024-03-ondo-finance/blob/78779c30bebfd46e6f416b03066c55d587e8b30b/contracts/ousg/ousgInstantManager.sol#L479-L485
# Vulnerability details
## Vulnerab…
-
# Lines of code
https://github.com/code-423n4/2023-07-amphora/blob/daae020331404647c661ab534d20093c875483e1/core/solidity/contracts/periphery/oracles/AnchoredViewRelay.sol#L74
# Vulnerability detai…
-
# Handle
@cmichelio
# Vulnerability details
## Vulnerability Details
The response from the price oracle always assumes 8 decimals (see `PoolLib.convertFromUsd`) but it's never checked if the orac…
-
# Lines of code
https://github.com/code-423n4/2024-03-ondo-finance/blob/main/contracts/ousg/ousgInstantManager.sol#L482
# Vulnerability details
## Summary
`ousgInstantManager::MINIMUM_OUSG_PRICE`…
-
# Lines of code
https://github.com/code-423n4/2024-01-salty/blob/main/src/price_feed/CoreChainlinkFeed.sol#L15
https://github.com/code-423n4/2024-01-salty/blob/main/src/price_feed/CoreSaltyFeed.sol#L…