Skip to content
Request an audit

‹ Findings database

In fillPair(), when the taker is the maker, the reduceOnly order mapping is not being deleted

Low/InfoNftperp Exchange audit·Three Sigma·NFT perpetuals·2nd January, 20243S-NFTPerp-L01

Description

When filling limit orders, if the trader doing the openPosition() call is the same as the maker of the limit order, it will delete the limit order.

Recommendation

If the limit order is a reduceOnly order, it should also delete the reduceOnlyOrders mapping.

Status

Addressed in #0dd59c3

Source

Disclosed by 0xSimao · Sherlock's 2025 Watson of the Year · 21 first places in 57 audit contests