mediumLogic errorEVM-Solidity
BMX Deli Swap: Unconditional lastUpdated advance in RangePool.sync leads to loss of streamed BMX when pool liquidity == 0
- Payout
- $0
- Protocol
- BMX Deli Swap
- Disclosed
- Sep 16, 2025
- Source
- sherlock
BMX Deli Swap's concentrated-liquidity reward gauge can strand streamed BMX tokens when a pool has zero active liquidity at the moment of a sync. RangePool.sync updates lastUpdated before applying per-token accumulation, and accumulation is gated on liquidity …
Similar reports
- No close matches yet.
References
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.