Property
Languagesolidity
Severityhigh
CWECWE-682: Incorrect Calculation
Confidence LevelHigh
Impact LevelHigh
Likelihood LevelLow

Description#

Using Keep3rV2.current() to fetch price data exposes your contract to oracle manipulation, as an attacker only needs to alter two data points to influence the reported value. This makes the price feed unreliable for critical operations like swaps, lending, or liquidations.

Impact#

If exploited, an attacker could manipulate token prices within your contract, leading to financial losses such as draining funds, executing unfair trades, or triggering unintended liquidations. This could compromise user funds and damage trust in your application.