NEST automates LDO buybacks funded by Lido DAO treasury earnings. Our security review covered the contracts, the fixes, and the verified mainnet deployment.
Glossary definition
Oracle
An oracle brings outside data on-chain, most often asset prices. A protocol that consumes one inherits its accuracy, liveness, and update thresholds.
Smart contracts cannot fetch data from outside the chain, so protocols rely on oracles to publish it on-chain, most often asset prices. Common forms are push-based feeds, such as Chainlink aggregators, and on-chain sources, such as a pool’s time-weighted average price. The protocol acts on whatever the oracle reports, which makes the oracle’s accuracy, freshness, and update thresholds part of the protocol’s trust model whether the authors intended that or not.
When we review an oracle integration, we look in both directions: what happens to the protocol when the oracle misreports or stops, and whether the protocol’s own defenses, such as staleness bounds and deviation gates, can be abused to cause a denial of service.
Used in context
Articles using this term.
A read-only reentrancy attack manipulate a smart contracts to extract value. Let's take a closer look at this vulnerability and how to prevent it.