Zealous Black Grasshopper - Assumption of Fixed Token Exponent in currentValue Function

[sherlock-admin2]

Zealous Black Grasshopper

Medium

Assumption of Fixed Token Exponent in currentValue Function

Summary

The currentValue function assumes that all token prices from the pythOracle use an exponent of 8. However, different token pairs in the Pyth Network may have varying exponents. This implicit assumption can lead to incorrect calculations when tokens with non-standard exponents are used.
Here are few of many tokens that does not have expo 8 from the oracle
- SHIB-EXPO(10)
- SCROLL-EXPO(10)
- BABYDOGE-EXPO(12)
- BBSOL-EXPO(12)

Root Cause

No response

Internal pre-conditions

No response

External pre-conditions

No response

Attack Path

No response

Impact

Incorrect Price Calculations - Orders, swaps, or value estimations involving tokens with non-standard exponents may yield incorrect results, leading to funds loss.

PoC

No response

Mitigation

No response