source avatarOracle Boar

Share

POLYMARKET HAS TO FIX GHOST FILLS ASAP. (and this might happen today...) V2 is live. But ghost fills are still alive too. My bot is stuck under $15k PnL for days because of this. Every dev and bot owner needs to read this right now. Here is the full picture of what is still broken and why it survived the upgrade: CLOB V2 closed the incrementNonce cancellation path. That was the easy exploit. The cheap one. The one that cost 0.1 dollars in gas to run against market makers all day. That specific path is gone. Good. But ghost fills are still happening because the root cause was never the nonce mechanic. The real issue is the time gap between off-chain order matching and on-chain settlement. That gap still exists in V2. Unchanged. Here is what that means in practice. Attacker matches your order off-chain. Looks like a clean fill on your end. Before settlement hits on-chain - they cancel their side. Your trade shows as filled. Your position is empty. Your capital is tied up in nothing. Losing trades settle instantly. Winning trades get pulled before they land. Polymarket's new VP of Engineering acknowledged it publicly today. "Cancellations are one of the most frustrating issues we're facing right now and we'll be rolling out a full fix very soon." Appreciated that he said it directly. But we have heard "very soon" before. Ghost fills were public knowledge months before V2. They survived a complete infrastructure overhaul. The nonce path closed. The settlement gap stayed open. Until the off-chain to on-chain timing is fixed at architecture level this attack stays viable against anyone running serious strategies. For devs right now: Verify every fill on-chain before assuming execution was clean. Size down positions where a ghost fill causes significant damage. Do not assume V2 solved this. It didn't. We need this asap, thanks.

No.0 picture
Disclaimer: The information on this page may have been obtained from third parties and does not necessarily reflect the views or opinions of KuCoin. This content is provided for general informational purposes only, without any representation or warranty of any kind, nor shall it be construed as financial or investment advice. KuCoin shall not be liable for any errors or omissions, or for any outcomes resulting from the use of this information. Investments in digital assets can be risky. Please carefully evaluate the risks of a product and your risk tolerance based on your own financial circumstances. For more information, please refer to our Terms of Use and Risk Disclosure.