Open code423n4 opened 2 years ago
When using Chainlink Price feeds it is important to ensure the price feed data was updated recently. While getting started with chainlink requires just one line of code, it is best to add additional checks for in production environments.
I believe the finding to be valid and Medium severity to be appropriate.
The sponsor has mitigated in a subsequent PR
Handle
throttle
Vulnerability details
Impact
Price can be stale and can lead to wrong
quoteAmount
return valueProof of Concept
Oracle data feed is insufficiently validated. There is no check for stale price and round completeness. Price can be stale and can lead to wrong
quoteAmount
return valueTools Used
Manual review
Recommended Mitigation Steps
Validate data feed