highLogic errorEVM-Solidity
Perennial V2 Update #4: When account is liquidated (protected), liquidator can increase account's position to any value up to `2**62 - 1` breaking all market accounting and stealing all market funds.
- Payout
- $0
- Protocol
- Perennial V2 Update #4
- Disclosed
- Jan 31, 2025
- Source
- sherlock
Perennial V2 Update #4 removed the invariant that forced a liquidated account's position to only decrease during liquidation. In the current code only a pending-close-state condition gates liquidation, and because collateral and position-size checks are skippe …
Similar reports
- No close matches yet.
References
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.