mediumOracle manipulationEVM-Solidity
Sentiment V2: `ChainlinkOracle` doesn't validate for minAnswer/maxAnswer
- Payout
- $0
- Protocol
- Sentiment V2
- Disclosed
- Aug 24, 2024
- Source
- sherlock
Sentiment V2's ChainlinkUsdOracle validates that reported prices are positive and fresh but never checks the Chainlink aggregator's minAnswer/maxAnswer bounds. Feeds such as BNB/USD on BSC still enforce a floor value, so during a sharp price decline the oracle …
Similar reports
- No close matches yet.
References
This report is already public and closed. CoinBuggie never publishes active or unpatched vulnerability data.