Summary

I am not sure but It can't make sense to CURVE_BEAN_METAPOOL first white list and then on next line dewhitelistToken again and used it like normally, In InitBipSeedGauge::init

Vulnerability Details

It Liquidity pool count when we try to get all the getWhitelistedTokens and try to total Bean or Supply in system, when ever call get LP the bean pool will be not count in it.

Impact

Lose Values inside the CURVE_BEAN_METAPOOL and this will be not count it white list token in system

Tools Used

Manual Review

Recommendations

Either put proper comment why you did this first place white list and the diwhitelist or just remove it from first place, or explain more clear why it not count with other LP.