{"affected":[{"affectedData":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"source":"cve@mitre.org"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:stableyieldcredit_project:stableyieldcredit:-:*:*:*:*:*:*:*","matchCriteriaId":"36D96995-BA15-47CD-BD6A-4CD8B0B4773C","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"The _deposit function in the smart contract implementation for Stable Yield Credit (yCREDIT), an Ethereum token, has certain incorrect calculations. An attacker can obtain more yCREDIT tokens than they should."},{"lang":"es","value":"La función _deposit en la implementación del contrato inteligente para Stable Yield Credit (yCREDIT), un token de Ethereum, presenta determinados cálculos incorrectos. Un atacante puede obtener más tokens yCREDIT de los que debería."}],"id":"CVE-2021-3004","lastModified":"2026-06-17T04:04:32.917","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"MEDIUM","cvssData":{"accessComplexity":"LOW","accessVector":"NETWORK","authentication":"NONE","availabilityImpact":"NONE","baseScore":5.0,"confidentialityImpact":"NONE","integrityImpact":"PARTIAL","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","version":"2.0"},"exploitabilityScore":10.0,"impactScore":2.9,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":false}],"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","version":"3.1"},"exploitabilityScore":3.9,"impactScore":3.6,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2021-01-03T04:15:12.263","references":[{"source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"],"url":"https://blocksecteam.medium.com/deposit-less-get-more-ycredit-attack-details-f589f71674c3"},{"source":"cve@mitre.org","tags":["Third Party Advisory"],"url":"https://etherscan.io/address/0xe0839f9b9688a77924208ad509e29952dc660261"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"],"url":"https://blocksecteam.medium.com/deposit-less-get-more-ycredit-attack-details-f589f71674c3"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"url":"https://etherscan.io/address/0xe0839f9b9688a77924208ad509e29952dc660261"}],"sourceIdentifier":"cve@mitre.org","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-682"}],"source":"nvd@nist.gov","type":"Primary"}]}