DeFi Oracle Manipulation: Attack Patterns and Defenses

// Secure oracle implementation
function getPrice() external view returns (uint256) {
    (uint256 price, uint256 timestamp) = oracle.latestRoundData();
    
    // Check freshness
    require(block.timestamp - timestamp < MAX_DELAY, "Stale price");
    
    // Check deviation from TWAP
    uint256 twap = getTWAP();
    require(
        price > twap * 95 / 100 && price < twap * 105 / 100,
        "Price deviation too high"
    );
    
    return price;
}