CTokenOracle.sol#getCErc20Price contains critical math error
CTokenOracle.sol#getCErc20Price contains a math error that immensely overvalues CTokens\\nCTokenOracle.sol#L66-L76\\n```\\nfunction getCErc20Price(ICToken cToken, address underlying) internal view returns (uint) {\\n    /*\\n        cToken Exchange rates are scaled by 10^(18 - 8 + underlying token decimals) so to scale\\n        the exchange rate to 18 decimals we must multiply it by 1e8 and then divide it by the\\n        number of decimals in the underlying token. Finally to find the price of the cToken we\\n        must multiply this value with the current price of the underlying token\\n    */\\n    return cToken.exchangeRateStored()\\n    .mulDivDown(1e8 , IERC20(underlying).decimals())\\n    .mulWadDown(oracle.getPrice(underlying));\\n}\\n```\\n\\nIn L74, IERC20(underlying).decimals() is not raised to the power of 10. The results in the price of the LP being overvalued by many order of magnitudes. A user could deposit one CToken and drain the reserves of every liquidity pool.
Issue CTokenOracle.sol#getCErc20Price contains critical math error\\nFix the math error by changing L74:\\n```\\nreturn cToken.exchangeRateStored()\\n.mulDivDown(1e8 , 10 ** IERC20(underlying).decimals())\\n.mulWadDown(oracle.getPrice(underlying));\\n   \\n```\\n\\nSentiment Team\\nFixed as recommended. PR here.\\nLead Senior Watson\\nConfirmed fix.
All lenders could be drained of all their funds due to excessive over valuation of CTokens cause by this error
```\\nfunction getCErc20Price(ICToken cToken, address underlying) internal view returns (uint) {\\n    /*\\n        cToken Exchange rates are scaled by 10^(18 - 8 + underlying token decimals) so to scale\\n        the exchange rate to 18 decimals we must multiply it by 1e8 and then divide it by the\\n        number of decimals in the underlying token. Finally to find the price of the cToken we\\n        must multiply this value with the current price of the underlying token\\n    */\\n    return cToken.exchangeRateStored()\\n    .mulDivDown(1e8 , IERC20(underlying).decimals())\\n    .mulWadDown(oracle.getPrice(underlying));\\n}\\n```\\n