economic-attack

Flash loan vulnerability detection focuses on values that can be manipulated within a single transaction, such as DEX reserves from getReserves() or slot0(). Check whether these values feed critical decisions like liquidations or borrowing, and whether flash loaned capital could move them significantly.

A donation attack inflates a vault's pricePerShare by sending tokens directly to the contract instead of depositing. When totalAssets() uses balanceOf(address(this)), an attacker can donate funds, distort share pricing, and steal subsequent depositors' funds through rounding.

Oracle staleness checks verify that latestRoundData() results include an updatedAt timestamp compared against a maximum staleness threshold. Code that reads the price without validating updatedAt can act on outdated prices during volatile markets, enabling unfair liquidations or undercollateralized borrows.

A safe TWAP window is at least 30 minutes, with 1-4 hours recommended for high-value decisions. Windows under 10 minutes remain manipulable through multi-block attacks or validator collusion, so short observation periods like 60 seconds should be flagged.

This analysis targets DeFi protocols with price dependencies, swaps, oracles, and vaults. It is less relevant for contracts without economic value flows, such as simple token contracts or access-control-only systems, where other vulnerability categories apply.