From 6870b29f3f974b47fcfb27b19836a6ab0ce16254 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Igor=20Ron=C4=8Devi=C4=87?= <57319163+igorroncevic@users.noreply.github.com> Date: Mon, 4 May 2026 18:38:41 +0200 Subject: [PATCH] fix: update known issues related to orders with zero amounts --- docs/cow-protocol/reference/contracts/core/README.mdx | 9 ++------- 1 file changed, 2 insertions(+), 7 deletions(-) diff --git a/docs/cow-protocol/reference/contracts/core/README.mdx b/docs/cow-protocol/reference/contracts/core/README.mdx index ce2f9e4d4..c3eadbfd9 100644 --- a/docs/cow-protocol/reference/contracts/core/README.mdx +++ b/docs/cow-protocol/reference/contracts/core/README.mdx @@ -62,15 +62,10 @@ The security considerations of upgradeability are discussed in the [GPv2Allowlis ## Security / Known Issues -### Partially fillable orders with zero amounts +### Orders with zero amounts -If a user creates an order with: +If a user creates an order with `sellAmount = 0` or `buyAmount = 0`, then this order could be executed an arbitrary amount of times instead of just a single time. -* `sellAmount = 0` -* `buyAmount = 0` -* `partiallyFillable = true` - -Then this order could be executed an arbitrary amount of times instead of just a single time. This means that any solver could drain the fee amount from the user until not enough funds are available anymore. :::tip