Zaros Part 1

Summary

The src\external\chainlink\keepers\BaseKeeper.sol contract holds a constant variable

Vulnerability Details

The contract assumes every price reported by a Chainlink data stream report will have 8 decimals.

However that is not always the case and these price will most likely have 18 decimals.

Impact

This variable is not yet used in the protocol however, in a future implementation, this value should be retrieved from the stream contract that is being used.

Tools Used

Manual review

Recommendations

In a future implementation, make sure to retrieve the decimals number from the stream before and scaled it correctly before using it in Zaros.