CVEvulnerability
CVE-2021-3004
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2021-01-03
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-682
Description
The _deposit function in the smart contract implementation for Stable Yield Credit (yCREDIT), an Ethereum token, has certain incorrect calculations. An attacker can obtain more yCREDIT tokens than they should.
Affected configurations
• stableyieldcredit project stableyieldcredit
Related
Weakness · CWE (1)
- CWE-682 Incorrect Calculation weakness
References
- https://blocksecteam.medium.com/deposit-less-get-more-ycredit-attack-details-f589f71674c3 Exploit, Third Party Advisory
- https://etherscan.io/address/0xe0839f9b9688a77924208ad509e29952dc660261 Third Party Advisory
- https://blocksecteam.medium.com/deposit-less-get-more-ycredit-attack-details-f589f71674c3 Exploit, Third Party Advisory
- https://etherscan.io/address/0xe0839f9b9688a77924208ad509e29952dc660261 Third Party Advisory