You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Currently only Kraken's price API is compatible with ASB. This creates an attack surface as price manipulation at quote time on the corresponding Kraken pair could be used to exploit makers for a large amount.
Currently only Kraken's price API is compatible with ASB. This creates an attack surface as price manipulation at quote time on the corresponding Kraken pair could be used to exploit makers for a large amount.
See the following article where such manipulation was used on Coinbase to exploit major DeFi protocol Compound:
https://rekt.news/coinbase-the-oracle/
This would likely be unprofitable for now due to the amount of available liquidity, but would likely become a problem later.
It would be best to aggregate multiple sources and calculate an average to prevent such events.
Other websocket sources:
The text was updated successfully, but these errors were encountered: