As I'm writing this, there have been three recent and significant price oracle attacks affecting Indexed Finance, Cream Finance and Rari. The difficulty of safely using oracles is compounded by the fact that attack vectors involving oracles are usually specific to the smart contract system. Where reentrancy is more easily preventable and can turn up in many forms of static and dynamic analysis, automated tooling is not helpful when it comes to oracle design.

We recommend So you want to use a price oracle by samczsun as a starting point for thinking about your oracle design. For a more technical overview of different oracle designs, refer to The Dangers of Price Oracles by OpenZeppelin.

‍