Submitted by cmichel
OracleRef.sol#L104
The OracleRef assumes that the backup oracle uses the same normalizer as the main oracle.
This generally isnt the case as it could be a completely different oracle, not even operated by Chainlink.
If the main oracle fails, the backup oracle could be scaled by a wrong amount and return a wrong price which could lead to users being able to mint volt cheap or redeem volt for inflated underlying amounts.
Should there be two scaling factors, one for each oracle?
ElliotFriedman (Volt) confirmed and commented:
