Skip to content
Request an audit

‹ Findings database

setFundingPeriod() can be DoSed due to calling settleFunding()

MediumNftperp Exchange audit·Three Sigma·NFT perpetuals·2nd January, 20243S-NFTPerp-M02

Description

setFundingPeriod() calls settleFunding() in the ClearingHouse.

It may be the case that someone frontruns setFundingPeriod() with a call to settleFunding(), making the setFundingPeriod() transaction revert.

Recommendation

Make the funding payments pro-rata to time instead of in fixed intervals. This would also solve the fact that settleFunding() calls can be frontrunned to avoid payments.

Status

Addressed in #d75fc8c

Source

Disclosed by 0xSimao · Sherlock's 2025 Watson of the Year · 21 first places in 57 audit contests