This error is just my guess, that the code lacks multiplication, I can be wrong, so I put severity = low.
In the finalityValidation function, stddev is subtracted from mean. Here are two examples of code.
first
second
as we see, in the second example stddev is multiplied by generationDeviationFactor.
However, the protocol also has a validationDeviationFactor variable that is only initialized and not used anywhere.
Suppose that it should have been in the first case.
If it is not, then this variable is dead code and can be deleted.
The contest is live. Earn rewards by submitting a finding.
This is your time to appeal against judgements on your submissions.
Appeals are being carefully reviewed by our judges.