mediumLogic errorEVM-Solidity
MachFi: Missing staleness check in PythOracle can lead to forced liquidations and theft of funds from borrowers.
- Payout
- $0
- Protocol
- MachFi
- Disclosed
- Dec 21, 2024
- Source
- sherlock
MachFi's Pyth price oracle integration calls getPriceUnsafe() without enforcing any staleness check, only verifying the returned price is positive. Because Pyth has no sponsored feeds on the Sonic network, prices only update when someone explicitly pushes them …
Similar reports
- No close matches yet.
References
This report is already public and closed. CoinBuggie never publishes active or unpatched vulnerability data.