mediumLogic errorEVM-Solidity
Perennial V2 Update #2: _loadContext() uses the wrong pendingGlobal.
- Payout
- $0
- Protocol
- Perennial V2 Update #2
- Disclosed
- Apr 6, 2024
- Source
- sherlock
Perennial v2's StrategyLib._loadContext() read the pending order for the vault's own address via market.pendings(address(this)) instead of the market-wide pending order via market.pending(). That local value was then folded into currentPosition and used to com …
Similar reports
- No close matches yet.
References
This report is already public and closed. CoinBuggie never publishes active or unpatched vulnerability data.