Underflow if `TOKEN_DECIMALS` are greater than 18.md

128 - Underflow if TOKEN_DECIMALS are greater than 18

In latestAnswer(), the assumption is made that TOKEN_DECIMALS is less than 18.

Recommendation:

Add a simple check to the constructor to ensure the added token has 18 decimals or less

---

Slide Screenshot

---

Slide Text

• ConsenSys Audit Aave CPM Finding 6.2
• Specification Input Validation
• Token Decimals > 18 -> Underflow
• Validate or Document
• Design Assumption

---

References

• Youtube Reference
• ConsenSys's Audit of Aave CPM Price Provider

---

Tags