All reports
highLogic errorEVM-Solidity

Perennial V2 Update #2: Requested oracle versions, which have expired, must return this oracle version as invalid, but they return it as a normal version with previous version's price instead

Payout
$0
Protocol
Perennial V2 Update #2
Disclosed
Apr 6, 2024
Source
sherlock

Perennial V2's KeeperOracle commits a requested oracle version as expired (assigning the previous valid version's price) when keepers fail to commit within the timeout. The `oracle.at()` validity flag is derived solely from whether price is nonzero, so these e …

Similar reports

  • No close matches yet.

References

This report is already public and closed. CoinBuggie never publishes active or unpatched vulnerability data.