Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Potential for price oracle manipulation #1110

Open
codehawks-bot opened this issue Aug 5, 2023 · 0 comments
Open

Potential for price oracle manipulation #1110

codehawks-bot opened this issue Aug 5, 2023 · 0 comments

Comments

@codehawks-bot
Copy link

Potential for price oracle manipulation

Severity

Medium Risk

Summary

Potential for price oracle manipulation

Vulnerability Details

The contract relies heavily on external price feeds provided by Chainlink oracles. If an attacker was able to manipulate these price feeds, it could potentially lead to incorrect collateralization ratios and an imbalance in the system.

Impact

This could potentially lead to a stuck contract, an imbalance in the token supply or incorrect collateralization ratios.

Tools Used

Manual Review

Recommendations

All Eggs in One Basket is a Tale as Old as Time
It is recommended to use multiple price oracles and to take the median price to reduce the risk of manipulation.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

3 participants