Assessment reportsPublic findings
Back to Zellic siteBack
↗
Assessment reports>Benqi Oracle>Threat Model>setDeviationThreshold
GeneralOverview
Findings
Medium (1)
Low (1)
DiscussionThe transferOracleAdmins function could always be revertedThe internal function BenqiPriceOracle::getFeedPrice is not usedIncorrect revert error message
Threat ModelWhat are threat models?
BenqiDualOracle.solcalculateDeviationgetFeedPricegetOraclePriceWithFreshnessgetUnderlyingPriceisPriceStalenormalizePricesetAssetOraclessetDeviationThresholdsetDirectPricesetMaxDeviationThresholdsetOracleModesetUnderlyingPricetransferOracleAdminsvalidateFeedPriceDeviation
BenqiPriceOracle.sol
Audit ResultsAssessment Results

Function: setDeviationThreshold(uint256 newThreshold)

This function sets the global deviation threshold.

Inputs

  • newThreshold

    • Control: Fully controlled by the caller.

    • Constraints: None.

    • Impact: A new deviation threshold to set the deviation threshold of.

Branches and code coverage

Intended branches

  • Set the deviation threshold.

Negative behavior

  • Revert if the caller is not an owner.

  • Revert if the deviation threshold is zero.

  • Revert if the deviation threshold is greater than the max deviation threshold.

Zellic © 2025Back to top ↑