D3UserQuote#getUserQuote queries incorrect token for exchangeRate leading to inaccurate quota calculations
A small typo in the valuation loop of D3UserQuote#getUserQuote uses the wrong variable leading to and incorrect quota being returned. The purpose of a quota is to mitigate risk of positions being too large. This incorrect assumption can dramatically underestimate the quota leading to oversized (and overrisk) positions.\\nD3UserQuota.sol#L75-L84\\n```\\n    for (uint256 i = 0; i < tokenList.length; i++) {\\n        address _token = tokenList[i];\\n        (address assetDToken,,,,,,,,,,) = d3Vault.getAssetInfo(_token);\\n        uint256 tokenBalance = IERC20(assetDToken).balanceOf(user);\\n        if (tokenBalance > 0) {\\n            tokenBalance = tokenBalance.mul(d3Vault.getExchangeRate(token)); <- @audit-issue queries token instead of _token\\n            (uint256 tokenPrice, uint8 priceDecimal) = ID3Oracle(d3Vault._ORACLE_()).getOriginalPrice(_token);\\n            usedQuota = usedQuota + tokenBalance * tokenPrice / 10 ** (priceDecimal+tokenDecimals);\\n        }\\n    }\\n```\\n\\nD3UserQuota.sol#L80 incorrectly uses token rather than _token as it should. This returns the wrong exchange rate which can dramatically alter the perceived token balance as well as the calculated quota.
Change variable from token to _token:\\n```\\n-           tokenBalance = tokenBalance.mul(d3Vault.getExchangeRate(token));\\n+           tokenBalance = tokenBalance.mul(d3Vault.getExchangeRate(_token));\\n```\\n
Quota is calculated incorrectly leading to overly risky positions, which in turn can cause loss to the system
```\\n    for (uint256 i = 0; i < tokenList.length; i++) {\\n        address _token = tokenList[i];\\n        (address assetDToken,,,,,,,,,,) = d3Vault.getAssetInfo(_token);\\n        uint256 tokenBalance = IERC20(assetDToken).balanceOf(user);\\n        if (tokenBalance > 0) {\\n            tokenBalance = tokenBalance.mul(d3Vault.getExchangeRate(token)); <- @audit-issue queries token instead of _token\\n            (uint256 tokenPrice, uint8 priceDecimal) = ID3Oracle(d3Vault._ORACLE_()).getOriginalPrice(_token);\\n            usedQuota = usedQuota + tokenBalance * tokenPrice / 10 ** (priceDecimal+tokenDecimals);\\n        }\\n    }\\n```\\n