Summary

Liquidated positions may still have orders in the current protocol

Vulnerability Details

marketOrder.clear() is not called when position is liquidated. Chainlink Automation will still execute the transaction. If there is still a small amount of margin in the user's account at this point, the order will bypass the creation check and execute the wrong trade instead

Impact

Likelihood: LOW

+

Impact: LOW

=

Severity: LOW

Tools Used

Manual review

Recommendations

Clear active pending orders after liquidation.