Liquidity Management

Summary

The withdrawal process includes calling the gExchangeRouter.createOrder function with the order type MarketDecrease on the GMX contract. The call outputs the collateral token which is received by the Perpetual vault. However, according to GMX documentation, Decrease position orders can output two tokens instead of a single token...

This was not accounted for in the withdrawal process when swapping the index token to collateral token, after the settle function is called

Vulnerability Details

Impact

Users will receive less than expected amount when they withdraw.

Tools Used

Manual Review

Recommendations