Risk of Incorrect Asset Pricing by StableOracle in Case of Underlying Aggregator Reaching minAnswer
Chainlink aggregators have a built-in circuit breaker to prevent the price of an asset from deviating outside a predefined price range. This circuit breaker may cause the oracle to persistently return the minPrice instead of the actual asset price in the event of a significant price drop, as witnessed during the LUNA crash.\\nStableOracleDAI.sol, StableOracleWBTC.sol, and StableOracleWETH.sol utilize the ChainlinkFeedRegistry to fetch the price of the requested tokens.\\n```\\nfunction latestRoundData(\\n  address base,\\n  address quote\\n)\\n  external\\n  view\\n  override\\n  checkPairAccess()\\n  returns (\\n    uint80 roundId,\\n    int256 answer,\\n    uint256 startedAt,\\n    uint256 updatedAt,\\n    uint80 answeredInRound\\n  )\\n{\\n  uint16 currentPhaseId = s_currentPhaseId[base][quote];\\n  AggregatorV2V3Interface aggregator = _getFeed(base, quote);\\n  require(address(aggregator) != address(0), "Feed not found");\\n  (\\n    roundId,\\n    answer,\\n    startedAt,\\n    updatedAt,\\n    answeredInRound\\n  ) = aggregator.latestRoundData();\\n  return _addPhaseIds(roundId, answer, startedAt, updatedAt, answeredInRound, currentPhaseId);\\n}\\n```\\n\\nChainlinkFeedRegistry#latestRoundData extracts the linked aggregator and requests round data from it. If an asset's price falls below the minPrice, the protocol continues to value the token at the minPrice rather than its real value. This discrepancy could have the protocol end up minting drastically larger amount of stableCoinAmount as well as returning a much bigger collateral factor.\\nFor instance, if TokenA's minPrice is $1 and its price falls to $0.10, the aggregator continues to report $1, rendering the related function calls to entail a value that is ten times the actual value.\\nIt's important to note that while Chainlink oracles form part of the OracleAggregator system and the use of a combination of oracles could potentially prevent such a situation, there's still a risk. Secondary oracles, such as Band, could potentially be exploited by a malicious user who can DDOS relayers to prevent price updates. Once the price becomes stale, the Chainlink oracle's price would be the sole reference, posing a significant risk.
StableOracle should cross-check the returned answer against the minPrice/maxPrice and revert if the answer is outside of these bounds:\\n```\\n    (, int256 price, , uint256 updatedAt, ) = registry.latestRoundData(\\n        token,\\n        USD\\n    );\\n    \\n    if (price >= maxPrice or price <= minPrice) revert();\\n```\\n\\nThis ensures that a false price will not be returned if the underlying asset's value hits the minPrice.
In the event of an asset crash (like LUNA), the protocol can be manipulated to handle calls at an inflated price.
```\\nfunction latestRoundData(\\n  address base,\\n  address quote\\n)\\n  external\\n  view\\n  override\\n  checkPairAccess()\\n  returns (\\n    uint80 roundId,\\n    int256 answer,\\n    uint256 startedAt,\\n    uint256 updatedAt,\\n    uint80 answeredInRound\\n  )\\n{\\n  uint16 currentPhaseId = s_currentPhaseId[base][quote];\\n  AggregatorV2V3Interface aggregator = _getFeed(base, quote);\\n  require(address(aggregator) != address(0), "Feed not found");\\n  (\\n    roundId,\\n    answer,\\n    startedAt,\\n    updatedAt,\\n    answeredInRound\\n  ) = aggregator.latestRoundData();\\n  return _addPhaseIds(roundId, answer, startedAt, updatedAt, answeredInRound, currentPhaseId);\\n}\\n```\\n