Link to Issue: code-423n4/2023-09-asymmetry-findings#34
The price()
function present in the VotiumStrategy contract now takes a _validate
parameter that is forwarded to the ethPerCvx()
function, instead of hardcoding a false
value.
31: function price(bool _validate) external view override returns (uint256) {
32: return (cvxPerVotium() * ethPerCvx(_validate)) / 1e18;
33: }
Invocations of this function from the AfEth contract correctly send a true
argument to enable the Chainlink response validation.