Description (CNA)
The _deposit function in the smart contract implementation for Stable Yield Credit (yCREDIT), an Ethereum token, has certain incorrect calculations. An attacker can obtain more yCREDIT tokens than they should.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://blocksecteam.medium.com/deposit-less-get-more-ycredit-attack-details-f589f71674c3
- https://etherscan.io/address/0xe0839f9b9688a77924208ad509e29952dc660261
ADP enrichment
No English description supplied.