ZealynX

A yield protocol can get the accrual math perfectly right and still pay out to whoever moves a number nobody was watching. Here is the shape. The moment a protocol prices rewards instead of just paying them, an oracle becomes part of the reward mechanism. Whoever can move that oracle can redirect the payout. Four ways this keeps showing up in real audits. A price computed by simulating a trade the caller can shape. If an attacker can size the trade, they set the price. An internal oracle that only updates when someone borrows or liquidates against it. Quiet markets go blind markets. The real price moves, the recorded one does not, and the gap is the exploit. A TWAP with an owner. Time weighting defeats traders. It does nothing against an admin key that can freeze or steer the feed whenever it wants. A feed read with no timestamp check. Stale data served as fresh, because nobody asked when the last update actually happened. The rule: any price that touches reward distribution needs the same scrutiny as a price that touches collateral. Ask who can trigger an update, what happens when nobody does, and whether a single key can move or freeze the answer. If you cannot say what your reward flow does the hour your feed stops updating, that is the finding.