Note: auraBAL and vlAURA reward contracts are not on the 4626 standard
Note: StashToken contracts are not ERC20 compliant.
convex-platform/contracts/contracts/StashToken.sol is designed to interact only with VirtualBalanceRewardPool and ExtraRewardStashV3. AnyextraRewards is distributed by a VirtualBalanceRewardPool, which is linked to a StashToken, the StashToken wraps the extraReward as a baseToken.
Aura is price agnostic and thus does not require oracles. Flash loans or any other type of price manipulation or front running do not affect the Aura system.