oracle-manipulation

Analyze smart contracts for oracle manipulation vulnerabilities in DeFi protocols.

1|1|Updated Feb 18, 2026
One-click install
npx skills add https://github.com/Apegurus/solidity-argus --skill oracle-manipulation
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: oracle-manipulation
Source: https://github.com/Apegurus/solidity-argus/tree/main/skills/vulnerability-patterns/oracle-manipulation
Command: npx skills add https://github.com/Apegurus/solidity-argus --skill oracle-manipulation

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill helps identify and mitigate risks associated with oracle manipulation attacks in DeFi protocols, protecting against significant financial losses.

Core Features & Use Cases

  • Vulnerability Identification: Detects common patterns like direct AMM spot price usage and stale price feeds.
  • Exploit Case Studies: Provides real-world examples (Harvest, Mango Markets) to understand attack vectors.
  • Secure Pattern Implementation: Offers code examples for using TWAPs, Chainlink with validation, and circuit breakers.
  • Use Case: A smart contract developer can use this Skill to review their protocol's price feed integration, ensuring it's resilient against manipulation before deployment.

Quick Start

Analyze the provided smart contract code for potential oracle manipulation vulnerabilities.

Frequently Asked Questions about oracle-manipulation

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
What is oracle manipulation in DeFi smart contracts?

Oracle manipulation in DeFi is an attack where spot prices or stale data feeds are exploited to drain protocol funds. This Skill identifies these vulnerabilities by analyzing smart contract code for manipulation patterns like flash loan exploits.

How do I secure Chainlink price feeds against manipulation?

To secure Chainlink price feeds, implement data validation and circuit breakers. This Skill provides secure coding patterns and detection checklists for Chainlink integration to ensure your smart contract is resilient against manipulation before deployment.

How can I detect flash loan oracle exploits in my protocol?

Detect flash loan oracle exploits by analyzing smart contract code for direct AMM spot price usage. This Skill identifies these attack vectors and provides real-world case studies like Harvest and Mango Markets to help you understand and mitigate them.

When should I use TWAP instead of spot price in DeFi protocols?

Use TWAP instead of spot price when your DeFi protocol is vulnerable to direct AMM spot price manipulation. This Skill explains TWAP usage as a secure pattern implementation to prevent single-block price manipulation and stale data issues.

Does this Skill detect stale price feed data in smart contracts?

Yes, this Skill detects stale price feed data usage in smart contracts. It analyzes your DeFi protocol's price feed integration to identify stale data vulnerabilities and provides secure coding patterns to mitigate the associated financial risks.