LiquidationPool::getStakeTotal() calculation looks wrong
Summary
The Total Stake computed from LiquidationPool::getStakeTotal() looks like a wrong calculation.
Vulnerability Details
getStakeTotal loops over the positions for holders and computes the stake total. In this process of computation, the call is delegated to stake function,
which returns either TST position or EUROs position based on the below condition.
As such, the stake computation is a combined sum of TST and EURO positions across holders mixed up. They are two different assets and treating them
interchangeably does not seem correct.
Impact
Incorrect total stake
Tools Used
Manual Review
Recommendations
Revisit the getStakeTotal logic to accurately compute the stake.
Lead Judging Commences
informational/invalid
Prize pool breakdown
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.