Summary

The createTradingAccountAndMulticall function allows users to create a trading account and make multiple calls in a single transaction. This function is marked as payable, which means it can receive Ether. However, the function does not include any logic to handle or refund the received Ether, causing the funds to become irretrievable.

Vulnerability Details

The createTradingAccountAndMulticall function is marked as payable, but it lacks logic to handle the Ether sent to it. This results in any Ether sent by mistake being stuck in the contract, with no way for users to retrieve it.

Impact

Users funds will be stuck.

Tools Used

Manual Review

Recommendations

Remove payable keyword from createTradingAccountAndMulticallfunction