mediumLogic errorEVM-Solidity
BMX Deli Swap: Integer Truncation in Incentive Rate Permanently Locks Unstreamed Rewards
- Payout
- $0
- Protocol
- BMX Deli Swap
- Disclosed
- Sep 16, 2025
- Source
- sherlock
In BMX Deli Swap's IncentiveGauge, the reward rate for a 7-day incentive is computed as `total / WEEK` using integer division, so any remainder is truncated and never streamed. At the end of the period `_updatePool` zeroes the leftover `remaining` balance inst …
Similar reports
- No close matches yet.
References
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.