Summary

Wrong Calculation of User's position due to getTstTotal()

Vulnerability Details

During calculation of LiquidationPool::position::_position.EUROs the calculation is done with getTstTotal() in denominator , the catch is that the getTstTotal()
is using pendingStake as well during consideration . If there is a large pending stake order and during that time the "position" is being calculated at that time position of user would come less as if after calculating the "position" someone deletes the pending stake then it would create loss for user.

Impact

Loss of position of user while calculating position

Tools Used

Manual

Recommendations

Dont consider pending stake orders.