The Standard

Summary

If any of the assets have tokens with decimals greater than 18, distributeAssets will revert.
Since distributeAssets is called from runLiquidation, liquidation cannot be performed.

Vulnerability Details

distributeAssets has the following calculation.
18 - asset.token.dec`
If the decimals of asset is greater than 18, the above calculation will cause an underflow and revert.

Therefore, distributeAssets cannot be performed and runLiquidation, which calls distributeAssets, also cannot be performed.

Impact

If any of the assets have tokens with decimals greater than 18, liquidation cannot be performed, resulting in bad debt.

Tools Used

VS Code

Recommendations

Change _portion * 10 ** (18 - asset.token.dec) to _portion * (10 ** 18) / (10 ** asset.token.dec)