Inverse Finance contest - Olivierdem's results

Rethink the way you borrow.

General Information

Platform: Code4rena

Start Date: 25/10/2022

Pot Size: $50,000 USDC

Total HM: 18

Participants: 127

Period: 5 days

Judge: 0xean

Total Solo HM: 9

Id: 175

League: ETH

Inverse Finance

Findings Distribution

Researcher Performance

Rank: 121/127

Findings: 1

Award: $0.38

🌟 Selected for report: 0

🚀 Solo Findings: 0

Lines of code

https://github.com/code-423n4/2022-10-inverse/blob/d86e73034e6c9e81124cd1a763c3a7288268f1ab/src/Oracle.sol#L116

Vulnerability details

Impact

Per Chainlink docs, the function latestAnswer() is deprecated. See link https://docs.chain.link/docs/data-feeds/price-feeds/api-reference/#latestanswer. This function does not error if no answer has been reached but returns 0. Besides, the latestAnswer is reported with 18 decimals for crypto quotes but 8 decimals for FX quotes

Proof of Concept

https://docs.chain.link/docs/data-feeds/price-feeds/api-reference/#latestanswer.

Tools Used

Manuel Review

Consider using a non deprecated function, like latestRoundData(). See: https://docs.chain.link/docs/price-feeds-api-reference/

#0 - neumoxx

2022-10-31T08:39:14Z

Duplicate of #601

#1 - c4-judge

2022-11-05T22:14:54Z

0xean marked the issue as duplicate

#2 - Simon-Busch

2022-12-05T15:28:32Z

Issue marked as satisfactory as requested by 0xean

#3 - c4-judge

2022-12-07T08:14:13Z

Simon-Busch marked the issue as duplicate of #584

AuditHub

A portfolio for auditors, a security profile for protocols, a hub for web3 security.

Built bymalatrax © 2024

Auditors

Browse

Contests

Browse

Get in touch

ContactTwitter