Cyfrin / 2023-07-foundry-defi-stablecoin

37 stars 32 forks source link

Potential for price oracle manipulation #1110

Open codehawks-bot opened 1 year ago

codehawks-bot commented 1 year ago

Potential for price oracle manipulation

Severity

Medium Risk

Summary

Potential for price oracle manipulation

Vulnerability Details

The contract relies heavily on external price feeds provided by Chainlink oracles. If an attacker was able to manipulate these price feeds, it could potentially lead to incorrect collateralization ratios and an imbalance in the system.

Impact

This could potentially lead to a stuck contract, an imbalance in the token supply or incorrect collateralization ratios.

Tools Used

Manual Review

Recommendations

All Eggs in One Basket is a Tale as Old as Time It is recommended to use multiple price oracles and to take the median price to reduce the risk of manipulation.