mediumLogic errorEVM-Solidity
ZeroLend One: Using the same heartbeat for multiple price feeds, causing DOS
- Payout
- $0
- Protocol
- ZeroLend One
- Disclosed
- Sep 10, 2024
- Source
- sherlock
ZeroLend One's price-fetch path hardcodes a single 30-minute heartbeat in PoolGetters::getAssetPrice and applies it uniformly to every asset on every chain, even though Chainlink feeds use chain- and pair-specific heartbeat intervals such as ~24 hours for USDT …
Similar reports
- No close matches yet.
References
This report is already public and closed. CoinBuggie never publishes active or unpatched vulnerability data.