rETH oracle depegging may allow for overborrowing

hats-finance / VMEX-0xb6861bdeb368a1bf628fc36a36cec62d04fb6a77

LP token lending protocol

MIT License

2 stars 4 forks source link

rETH oracle depegging may allow for overborrowing #11

Open hats-bug-reporter[bot] opened 1 year ago

hats-bug-reporter[bot] commented 1 year ago

Github username: -- Submission hash (on-chain): 0x57cb4226d489216ce6c5eda56f994c7ebc21c9b3f23f9c9cb171685c79c10a61 Severity: low

Description: Description\ The rETH oracle used in the VMEX oracle logic may report a higher price if rETH depegs, and the market value is lower than the eth price * rate.

Attack Scenario\ The higher price means users can overborrow with rETH as collateral.

ksyao2002 commented 1 year ago

We are considering removing the rETH token and all derived tokens, since if a depeg happens, then the BalancerOracle also won't be able to catch it.