The price oracle in PriceOracle.sol in Compound Finance Compound Price Oracle 1.0 through 2.0 allows a price poster to set an invalid asset price via the setPrice function, and consequently violate the intended limits on price swings.
References
Link | Resource |
---|---|
https://privacylog.blogspot.com/2019/10/compound-finance-zero-day-prices-can.html | Mitigation Third Party Advisory |
Configurations
History
No history.
Information
Published : 2020-06-03 17:15
Updated : 2024-02-28 17:47
NVD link : CVE-2019-20809
Mitre link : CVE-2019-20809
CVE.ORG link : CVE-2019-20809
JSON object : View
Products Affected
compound
- price_oracle
CWE