mediumLogic errorEVM-Solidity
BMX Deli Swap: `DeliHookConstantProduct` swapping `exactOutput` and `_feeFromOutput` is incorrect
- Payout
- $0
- Protocol
- BMX Deli Swap
- Disclosed
- Sep 16, 2025
- Source
- sherlock
DeliHookConstantProduct is a Uniswap v4 hook that preserves the invariant K across all swap types so that swap fees can be forwarded to a FeeProcessor. For exactOutput swaps in the oneForZero direction (zeroForOne == false), the hook computes _pendingFeeAmount …
Similar reports
- No close matches yet.
References
This report is already public and closed. CoinBuggie never publishes active or unpatched vulnerability data.