Venus wstETH Oracle
Summary
Venus Protocol is a DeFi lending protocol deployed on multiple chains, including Binance Smart Chain and Ethereum. This audit focused on the `WstETHOracle` contract, which will be configured in the `ResilientOracle` as the MAIN oracle for the `wstETH` token on Ethereum. This audit report identified two low-severity issues related to the oracle design. Specifically, the oracle assumes a fixed 1:1 ratio between the `stETH` token and `ETH` (VWST-1). Also, there may be a risk of using stale price data returned from the oracle (VWST-2). The code is well-documented and has 100% test coverage. The audit team has strictly covered the files in the Scope section, and any other files were out of the scope of this audit. It is strongly recommended the Venus team to address all issues outlined in this report. **Update**: All issues have been either mitigated or acknowledged by the Venus team. For VWST-1, please see the issue details below for the Venus team's response on how this issue will be mitigated.
Issues (6)
Low | Medium | High | Critical | Total | |
|---|---|---|---|---|---|
Not fixed | 6 | - | - | - | 6 |
Fixed | - | - | - | - | 0 |
| Total | 6 | 0 | 0 | 0 | 6 |