highLogic errorEVM-Solidity
BMX Deli Swap: Reward Token Loss for LPs During NFT Position Transfer
- Payout
- $0
- Protocol
- BMX Deli Swap
- Disclosed
- Sep 16, 2025
- Source
- sherlock
In BMX Deli Swap's DeliHook v4 pools, liquidity providers accrue per-position BMX reward balances that are auto-claimed whenever a position is modified, removed, or transferred. The flaw is an ordering bug in the transfer path: the ERC721 transferFrom updates …
Similar reports
- No close matches yet.
References
This report is already public and closed. CoinBuggie never publishes active or unpatched vulnerability data.