All reports
mediumLogic errorCosmos-SDK

Dango DEX: `OwnerMsg::ForceCancelOrders` is unusable due to the DEX contract lacking a `receive` function to accept refunds from cancelled passive liquidity orders

Payout
$0
Protocol
Dango DEX
Disclosed
Sep 29, 2025
Source
sherlock

Dango DEX's owner-only emergency function ForceCancelOrders becomes completely unusable when at least one passive liquidity order exists on the book. When cancelling a passive order, the refund transfer is addressed to that order's user, which for passive orde …

Similar reports

  • No close matches yet.

References

This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.