Liquidity Management

Summary

The Perpetual Vault Protocol does not handle rebase tokens, which could break logic relying on stored balances.

Vulnerability Details

The PerpetualVault contract does not account for rebase tokens, which can change their total supply. If such tokens are used as collateral, the contract's logic for calculating and managing balances could be disrupted.

Impact

Using rebase tokens could lead to incorrect balance calculations, causing users to receive incorrect amounts during deposits or withdrawals and potentially leading to financial losses.

Tools Used

• Manual code review

Recommendations

Implement checks to ensure that the collateral token is not a rebase token. If rebase tokens are to be supported, update the contract's logic to handle changes in token supply correctly.