mediumOracle manipulationEVM-Solidity
WOOFi Swap: WooFi oracle can fail to validate its price with Chainlink price feed
- Payout
- $0
- Protocol
- WOOFi Swap
- Disclosed
- Mar 20, 2024
- Source
- sherlock
WOOFi Swap's WooracleV2_2 computes its Chainlink reference price in 8-decimal precision. For a trading pair whose base token is extremely cheap relative to an expensive quote token (e.g., a 0.0001$ base vs a 60,000$ quote), the integer division in the referenc …
Similar reports
- No close matches yet.
References
This report is already public and closed. CoinBuggie never publishes active or unpatched vulnerability data.