| Package | Affected versions | Patched versions |
|---|---|---|
| price oracle | ≥ 1.0, ≤ 2.0 |
The price oracle in PriceOracle.sol in Compound Finance Compound Price Oracle 1.0 through 2.0 allows a price poster to set an invalid asset price via the setPrice function, and consequently violate the intended limits on price swings.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free