highOracle manipulationEVM-Solidity
Sentiment V2: Red Stone Oracle Can Time Travel
- Payout
- $0
- Protocol
- Sentiment V2
- Disclosed
- Aug 24, 2024
- Source
- sherlock
Sentiment V2's RedstoneCoreOracle caches the asset and ETH/USD prices whenever any user calls updatePrice(), but imposes no replay protection: as long as newly submitted observations fall within the three-minute validity window, the same or different observati …
Similar reports
- No close matches yet.
References
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.