0xhexrecon

/**
 * PoC: Oracle Staleness — Attacker Guarantees Stale Price via `none` VAA
 *
 * VULNERABILITY:
 *   All oracle-reading functions (borrow, remove-collateral, liquidate-collateral)
 *   accept pyth-price-feed-data as (optional (buff 8192)). Passing `none` is
 *   explicitly a no-op in update-pyth() — it returns SUCCESS immediately WITHOUT
 *   touching oracle storage. The subsequent read-price() call then uses whatever
 *   stale price is in storage.
 *