Improper Access Control

Property
Language	solidity
Severity
CWE	CWE-284: Improper Access Control
Confidence Level	Medium
Impact Level	High
Likelihood Level	High

Description#

The oracle update function in your smart contract is missing access control, allowing anyone to call it. This means that unauthorized users can update or manipulate oracle data.

Impact#

If exploited, an attacker could feed false or manipulated data to your application by updating the oracle, potentially leading to financial loss, incorrect contract behavior, or exploitation of protocol logic. This could compromise user funds and undermine trust in the contract.