Submitted by 0x73696d616f
The impact of this finding is more on the marketing/data fetching side, on exchanges it would appear that the shares are worth less VIRTUAL_SHARES than the underlying token. Given that it would influence the perception of the value of the shares token, medium severity seems appropriate.
The Openzeppelin implementation includes the decimals offset (log10(VIRTUAL_SHARES) in LendingPool) in the decimals() function. However, INIT only places the decimals of the underlying.
A POC was built, add it to TestLendingPool.sol:
Vscode, Foundry
Include the virtual shares decimals in the decimals() function:
fez-init (INIT) confirmed
