mediumOracle manipulationEVM-Solidity
Common Stableswap: stale price can be prolonged
- Payout
- $0
- Protocol
- Common Stableswap
- Disclosed
- Jul 21, 2024
- Source
- hats
The stableswap's rate update accounting refreshes last_token_rate_update_ts on every call to update/force_update_rate even when the underlying oracle price did not change. This lets any caller repeatedly reset the expiration timer for a stale oracle quote, so …
Similar reports
- No close matches yet.
References
- https://github.com/hats-finance/Common--Stableswap-0xd4d9a2772202ce33b24901d3fc94e95a84b37430/issues/27
- https://github.com/hats-finance/Common--Stableswap-0xd4d9a2772202ce33b24901d3fc94e95a84b37430
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.