mediumLogic errorEVM-Solidity
Summer.fi - governance v2: Re-adding a removed reward token causes inconsistent userRewardPerTokenPaid accounting
- Payout
- $0
- Protocol
- Summer.fi - governance v2
- Disclosed
- Oct 7, 2025
- Source
- sherlock
Summer.fi's governance-v2 staking rewards manager has an accounting inconsistency bug: when a reward token is removed from the reward list and later re-added, the contract fails to reset `rewardPerTokenStored` and never initializes `userRewardPerTokenPaid` for …
Similar reports
- No close matches yet.
References
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.