High severity7.5NVD Advisory· Published Jan 3, 2021· Updated Jun 17, 2026

CVE-2020-35962

Description

The sellTokenForLRC function in the vault protocol in the smart contract implementation for Loopring (LRC), an Ethereum token, lacks access control for fee swapping and thus allows price manipulation.

Affected products

Loopring/Loopringdescription
Loopring/LRC (Loopring) vault protocolllm-create

Patches

Vulnerability mechanics

References

blocksecteam.medium.com/loopring-lrc-protocol-incident-66e9470bd51fnvdExploitThird Party Advisory
etherscan.io/address/0x4b89f8996892d137c3de1312d1dd4e4f4ffca171nvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000