Summary

If account holding tokens like usdt is blacklisted then withdrawal will fail.

Vulnerability Details

In function withdrawMargin if tokens like usdt are transfered and account used for transfer is blacklisted then any transfer attempts are reverted and tokens won't be transfered.
code - https://github.com/Cyfrin/2024-07-zaros/blob/main/src/perpetuals/branches/TradingAccountBranch.sol#L358-L398

Impact

If account is blacklisted then user won't be able to withdraw their funds.

Tools Used

Manual review

Recommendations

specify users in what address they'd like to withdraw