Skip to content
Request an audit

‹ All findings

PerpEngineLp::burnLp() and SpotEngineLp::burnLp() are missing slippage checks

Low/InfoVertex·by the Three Sigma team·Hybrid orderbook DEX·3rd April 20243S-Vertex-L07

Report PageSource

Description

PerpEngineLp::burnLp() and SpotEngineLp::burnLp() have no slippage control parameters, which means that a user could get base and quote at a worse price/quantity than expected. The severity in Vertex is lower as transactions have to go through a delay or the sequencer, which makes it much harder to do MEV. In any case, the issue persists.

Recommendation

Include minimum quote and base parameters in the burnLp() functions.

Status

Acknowledged

Found during Three Sigma’s team review · 0xSimao on the review team