@dcposch.eth
not a vulnerability, but you probably want a configurable multiplier on getReturnPerSlot, otherwise results depend on token decimals.
for example, stake 1 USDC = 1e6 ^ (3/4) = $0.03 reward per slot
stake 1 DAI = 1e18 ^ (3/4) = $0.00003 reward per slot