Summary

In the deployment configuration file, HelperConfig.s.sol, the wrong pricefeed address is set for BTC/USD. this leads to getting a wrong pricing for BTC/USD

Vulnerability Details

Since the pricefeed address used for BTC/USD is that of ETH/USD, this leads to the protocol calculating with the wrong pricing always and hence leads to loss of funds for BTC users

Impact

• loss of funds for BTC users because the KittyVault contract will always calculate their collateral value to be less than the true worth of their BTC in the vault

Tools Used

-manual review

Recommendations

change the pricefeed address to the correct BTC/USD pricefeed address which is 0x1b44F3514812d835EB1BDB0acB33d3fA3351Ee43