Venus - Correlated Oracles

Off-Chain (Public)

Audited on 2024/06/27

No active critical issues

Summary

This audit covered an oracle system used in the wider Venus ecosystem. This oracle system is designed to work with correlated tokens and return the USD price of the underlying token amount for one correlated token via a mix of native token contracts and staking managers. The audit has not revealed any significant issues, only a few Low- and informational-severity Issues that should still be addressed before contracts are deployed. The audit report also contains the VER-COR-2 issue that the Venus team reported to us. Overall, the code is well-written and documented. The test suite consists of 128 tests with 92.16% coverage. **Fix Review** All issues have either been fixed or acknowledged.

Project

Venus Protocol

Multi-Chain

Issues (4)

	Low	Medium	High	Critical	Total
Not fixed	2	-	-	-	2
Fixed	2	-	-	-	2
Total	4	0	0	0	4

Contracts (273)

#	Github Repository	Commit Hash	File	Url
81	VenusProtocol/oracle	3e86e3234cf9f61cfb973fccef9fcf1afff2c25a	test/StkBNBOracle.ts	Check on Github
82	VenusProtocol/oracle	3e86e3234cf9f61cfb973fccef9fcf1afff2c25a	deployments/bscmainnet/solcInputs/d647123072ba05451b756817f39951df.json	Check on Github
83	VenusProtocol/oracle	3e86e3234cf9f61cfb973fccef9fcf1afff2c25a	deploy/5-deploy-lst.ts	Check on Github
84	VenusProtocol/oracle	3e86e3234cf9f61cfb973fccef9fcf1afff2c25a	deployments/sepolia/solcInputs/44d276ef597ed410d246aeb39628d203.json	Check on Github
85	VenusProtocol/oracle	3e86e3234cf9f61cfb973fccef9fcf1afff2c25a	deployments/sepolia/.chainId	Check on Github
86	VenusProtocol/oracle	3e86e3234cf9f61cfb973fccef9fcf1afff2c25a	deployments/sepolia/solcInputs/61a63fbc062c2591c6768138f59373e1.json	Check on Github
87	VenusProtocol/oracle	3e86e3234cf9f61cfb973fccef9fcf1afff2c25a	contracts/oracles/mocks/MockBinanceFeedRegistry.sol	Check on Github
88	VenusProtocol/oracle	3e86e3234cf9f61cfb973fccef9fcf1afff2c25a	deployments/bscmainnet/PythOracle_Proxy.json	Check on Github
89	VenusProtocol/oracle	3e86e3234cf9f61cfb973fccef9fcf1afff2c25a	contracts/test/PancakePairHarness.sol	Check on Github
90	VenusProtocol/oracle	3e86e3234cf9f61cfb973fccef9fcf1afff2c25a	test/utils/makeChainlinkOracle.ts	Check on Github

...

#	Github Repository	Commit Hash	File	Url
81	VenusProtocol/oracle	3e86e3234cf9f61cfb973fccef9fcf1afff2c25a	test/StkBNBOracle.ts	Check on Github
82	VenusProtocol/oracle	3e86e3234cf9f61cfb973fccef9fcf1afff2c25a	deployments/bscmainnet/solcInputs/d647123072ba05451b756817f39951df.json	Check on Github
83	VenusProtocol/oracle	3e86e3234cf9f61cfb973fccef9fcf1afff2c25a	deploy/5-deploy-lst.ts	Check on Github
84	VenusProtocol/oracle	3e86e3234cf9f61cfb973fccef9fcf1afff2c25a	deployments/sepolia/solcInputs/44d276ef597ed410d246aeb39628d203.json	Check on Github
85	VenusProtocol/oracle	3e86e3234cf9f61cfb973fccef9fcf1afff2c25a	deployments/sepolia/.chainId	Check on Github
86	VenusProtocol/oracle	3e86e3234cf9f61cfb973fccef9fcf1afff2c25a	deployments/sepolia/solcInputs/61a63fbc062c2591c6768138f59373e1.json	Check on Github
87	VenusProtocol/oracle	3e86e3234cf9f61cfb973fccef9fcf1afff2c25a	contracts/oracles/mocks/MockBinanceFeedRegistry.sol	Check on Github
88	VenusProtocol/oracle	3e86e3234cf9f61cfb973fccef9fcf1afff2c25a	deployments/bscmainnet/PythOracle_Proxy.json	Check on Github
89	VenusProtocol/oracle	3e86e3234cf9f61cfb973fccef9fcf1afff2c25a	contracts/test/PancakePairHarness.sol	Check on Github
90	VenusProtocol/oracle	3e86e3234cf9f61cfb973fccef9fcf1afff2c25a	test/utils/makeChainlinkOracle.ts	Check on Github

...

Venus - Correlated Oracles

Summary

Issues (4)

Inconsistency in the Function Call Sequence Could Lead to an Outdated Pricenot_fixed/low

Upgradable Tokens Can Have Their Functionality Altered Which May Result in Inaccurate Ratesnot_fixed/low

Contracts (273)