Impact

since v0.3.2, decimals use the full range of the underlying int168 type. multiplication of 168 bit integers can wrap in 256-bit arithmetic, but safemul does not check for that.

Patches

Workarounds

References

see #2845

For more information

If you have any questions or comments about this advisory:

• Open an issue in example link to repo
• Email us at example email address