Skip to content
Request an audit

‹ Findings database

_match() always checks the trigger of the first order of a certain tick, instead of checking i order

Low/InfoNftperp Matching Engine audit·Three Sigma·NFT perpetuals·29th January, 20243S-NFTPerp-L02

Description

PositionManager:_match() looks for all the orders for their trigger values as some order may have been filled/deleted.

However, currently it only checks the first order instead of the i one, which could cause problems down the line.

Status

Addressed in #b471f71

Source

Disclosed by 0xSimao · Sherlock's 2025 Watson of the Year · 21 first places in 57 audit contests