CVE-2018-13078: Integer Overflow or Wraparound

The mintToken function of a smart contract implementation for Jitech JTH, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

Coinbase: ETH contract handling errors

A business logic error in the ETH contract handling code allowed for a nested revert call in contract execution to improperly credit a user account though funds had not been transferred. In addition, the code did not appropriately handle delegatecall within a contract. Sample contract for the fir...

Coinbase: Ethereum account balance manipulation

The researchers noticed an issue with our ETH receiving code when receiving from a contract. This allowed sending of ETH to Coinbase to be credited even if the underlying contract execution failed. The issue was fixed by changing the contract handling logic. Analysis of the issue indicated only...

Coinbase: Balance Manipulation - BUG

Hello once again, I have discovered another balance manipulation bug. This time it is much more simpler, but basically has the same outcome. EXPLANATION: When you create basic standard Vault and transfer money from your Main Wallet to the vault the balance doesn't "lock up", which means that even...