highLogic errorEVM-Solidity
BMX Deli Swap: Users' voting weight can be double-counted when finalize epoch is processed in multiple steps
- Payout
- $0
- Protocol
- BMX Deli Swap
- Disclosed
- Sep 16, 2025
- Source
- sherlock
BMX Deli Swap's Voter contract tallies epoch votes through finalizeEpoch, which is batched into multiple calls because the autoVoter list can grow unbounded and would otherwise hit out-of-gas. The tally routine reads the live SBF_BMX.balanceOf(voterAddr) at pr …
Similar reports
- No close matches yet.
References
This report is already public and closed. CoinBuggie never publishes active or unpatched vulnerability data.