mediumOracle manipulationEVM-Solidity
BendDAO: No check if Arbitrum/Optimism L2 sequencer is down in Chainlink feeds `PriceOracle.sol`
- Payout
- $0
- Protocol
- BendDAO
- Disclosed
- Sep 3, 2024
- Source
- code4rena
The BendDAO protocol fails to verify the operational status of the L2 sequencer when fetching price data from Chainlink feeds. In the event of sequencer downtime, oracle data becomes stale, yet the protocol continues to use these outdated prices for core lendi …
Similar reports
- No close matches yet.
References
- https://github.com/code-423n4/2024-07-benddao-findings/issues/24
- https://github.com/code-423n4/2024-07-benddao-findings
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.