Core Contracts

Summary

totalBorrowed is incorrect because the getNormalizedDebt function returns an index value, not totalBorrowed amount.

Vulnerability Details

The getNormalizedDebt function returns an index, not the totalBorrowed amount, as implemented in the LiquidityPool contract.

Using the index value instead of the totalBorrowed amount will cause incorrect calculations in getUtilizationRate, as this function should return the utilization of deposits. The index value will lead to incorrect results.

Impact

The totalBorrowed value is incorrect, leading to wrong calculations in getUtilizationRate, which will return an incorrect utilization rate.

Recommendations

Use the correct function to get the totalBorrowed value in the getUtilizationRate function.

Or modify the getNormalizedDebt function to return the totalBorrowed amount.