mediumOracle manipulationEVM-Solidity
BakerFi: Min and maxAnswer never checked for oracle price feed
- Payout
- $0
- Protocol
- BakerFi
- Disclosed
- Jun 24, 2024
- Source
- code4rena
The BakerFi lending protocol is vulnerable to incorrect asset pricing during periods of extreme market volatility because its Chainlink oracle implementation fails to validate price data against the feed's predefined minimum and maximum bounds. Chainlink aggre …
Similar reports
- No close matches yet.
References
- https://github.com/code-423n4/2024-05-bakerfi-findings/issues/16
- https://github.com/code-423n4/2024-05-bakerfi-findings
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.