highLogic errorEVM-Solidity
Perennial V2 Update #2: Empty orders do not request from oracle and during settlement they use an invalid oracle version with `price=0` which messes up a lot of fees and funding accounting leading to loss of funds for the makers
- Payout
- $0
- Protocol
- Perennial V2 Update #2
- Disclosed
- Apr 6, 2024
- Source
- sherlock
Perennial V2's Market.update only requests a fresh oracle version when the submitted order is non-empty. An empty order (one that leaves a user's position unchanged, typical of automated settles) creates a new global order without a corresponding oracle reques …
Similar reports
- No close matches yet.
References
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.