All reports
mediumLogic errorEVM-Solidity

Perennial V2 Update #2: Liquidator can set up referrals for other users

Payout
$0
Protocol
Perennial V2 Update #2
Disclosed
Apr 6, 2024
Source
sherlock

Perennial V2's referral registration logic let a liquidator permanently pin their own address as the referrer on a victim account that had never been liquidated before and had no referrer set. Liquidation orders are exempt from the usual non-empty-order author …

Similar reports

  • No close matches yet.

References

This report is already public and closed. CoinBuggie never publishes active or unpatched vulnerability data.