Description
Variables of type int128 are being upcasted to int256 and then downcasted again in the burnLp function in PerpEngineLp.sol and SpotEngineLP.sol, leading to silent overflow.
Recommendation
Consider using a solution like OpenZeppelin's SafeCast Library.
Status
Acknowledged