Security Incident
Degen.Money Double Authorization Vulnerability
Twitter users reported that DeFi's liquidity mining project Degen.Money exploited a double approval vulnerability to get users' Money.
- Attack category
- Double Authorization Vulnerability
Incident Overview
The first authorization gives the pledge contract, and the second authorization gives the right to transfer money, which will result in the user's funds being taken away by the attacker. YFI founder Andre Cronje says the project does have risks.
Sources & References
This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.