highLogic errorEVM-Solidity
Perennial V2 Update #4: `InvariantLib` uses current position for margin check allowing to withdraw collateral while the position decrease is only pending and can cause unexpected immediate user liquidation.
- Payout
- $0
- Protocol
- Perennial V2 Update #4
- Disclosed
- Jan 31, 2025
- Source
- sherlock
Perennial V2's invariant validation uses two different position values for what should be the same solvency check. Normal update margins are validated against the pending expected position (currentPosition), while the liquidation maintenance check evaluates th …
Similar reports
- No close matches yet.
References
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.