mediumOracle manipulationEVM-Solidity
Sentiment V2: RedStone oracle is vulnerable because ```updatePrice``` is not called during the ```getEthValue``` function.
- Payout
- $0
- Protocol
- Sentiment V2
- Disclosed
- Aug 24, 2024
- Source
- sherlock
Sentiment V2's RedstoneOracle keeps stale pricing because its getValueInEth view function reads cached assetUsdPrice/ethUsdPrice state values, while the updatePrice function that refreshes them is never invoked from within the price read path. Because updatePr …
Similar reports
- No close matches yet.
References
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.