Lucene search
+L

3 matches found

Code423n4
Code423n4
added 2021/08/11 12:0 a.m.13 views

OracleManagerFlippening_V0 wrong decimals

Handle cmichel Vulnerability details The OracleManagerFlippeningV0.updatePrice function states that it wants to return the eth dominance as a percentage where 100% = 1e20. It's unclear why there is a division by 1e10 to compute the bitcoin market cap: uint256btcPrice btcSupply 1e10 Impact The pri...

6.8AI score
SaveExploits0
Code423n4
Code423n4
added 2021/08/11 12:0 a.m.8 views

OracleManagerFlippening_V0 price data could be stale

Handle cmichel Vulnerability details There is no check in OracleManagerFlippeningV0.getLatestPrice if the return values indicate stale data. This could lead to stale prices according to the Chainlink documentation: under current notifications: "if answeredInRound roundId could indicate stale data...

6.8AI score
SaveExploits0
Code423n4
Code423n4
added 2021/08/11 12:0 a.m.8 views

OracleManagerFlippening_V0, OracleManagerEthVsBtc only work if chainlink decimals are the same

Handle cmichel Vulnerability details The OracleManagerFlippeningV0, OracleManagerEthVsBtc contracts divide the ETH price by the BTC price and want to return a value where 100% = 1e20. This does not work if the chainlink oracle decimals for ETH are different from the one for BTC. Impact The "price...

6.8AI score
SaveExploits0
Rows per page
Query Builder