Repeated rounding leaves tiny residual amounts ('dust') that accumulate and may become unclaimable or be swept by privileged actors, and can be abused to grief share math.
// Track residue and allow governed sweep; or assign rounding residue to protocol reserve.
Largest recorded losses in the same failure class — related, not the same bug:
The SaferICO scanner runs 201 detectors over your Solidity source, SAFE-0087 among them. Paste an address or the source itself — a small per-scan fee, shown before you sign, or unlimited on any plan.