Security Advisory

CVE-2020-35962

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2021-01-03 06:55:42

Last updated 2024-08-04 17:16:13

Assigner mitre

State PUBLISHED

Description

The sellTokenForLRC function in the vault protocol in the smart contract implementation for Loopring (LRC), an Ethereum token, lacks access control for fee swapping and thus allows price manipulation.

← Browse all CVEs View on cve.org ↗