Click through a same-block style lab scenario: flash-borrow demo capital → spike an unsecured spot oracle → attempt to over-borrow from a VulnerableVault (lab success) versus a MitigatedVault that prices with a TWAP window and trips a circuit breaker (blocked).
If a lending vault trusts a single spot price that can move inside one atomic transaction (flash loan + thin pool / lab oracle), an attacker can temporarily inflate collateral value, borrow more debt than the honest price allows, then repay the flash loan — leaving the vault short.
TWAP-style windows average recent samples so a one-tick spike barely moves the LTV price. A circuit breaker refuses borrows when spot diverges too far from TWAP. Access control limits who can update feeds or pause markets.
Tip: run 1 → 2 → 3a and 3b. Mirrors Solidity tests in test/FlashLoanRiskLab.js.
Pricing: live spot only · no TWAP · no breaker
Pricing: TWAP · deviation circuit breaker · owner pause
Average recent oracle samples so a single-transaction spike cannot rewrite the LTV price.
If spot diverges from TWAP beyond 500 bps, refuse new borrows and optionally pause.
Restrict who can push prices or close circuits. Lab oracle is open on purpose to teach the failure mode.
Hardhat suite proving Vulnerable drain vs Mitigated block on local demo tokens.