No ERC20 safe* versions called

Handle cmichel Vulnerability details The claim function performs an ERC20 transfer rewardsToken.transferto, claiming; but does not check the return value, nor does it work with all legacy tokens. Some tokens like USDT don't correctly implement the EIP20 standard and their transfer/transferFrom...

ERC20 return values not checked

Handle cmichel Vulnerability details The ERC20.transfer and ERC20.transferFrom functions return a boolean value indicating success. This parameter needs to be checked for success. Some tokens do not revert if the transfer failed but return false instead. The Staker.withdraw function does not chec...

getUsersConfirmedButNotSettledSynthBalance uses current price instead of deposit price

Handle cmichel Vulnerability details The LongShort.getUsersConfirmedButNotSettledSynthBalance function estimates the outstanding synthetic tokens using the latest synthetic token price currentMarketUpdateIndex, instead of the price at the next price update after the user deposited...

Use safeTransfer instead of transfer

Handle shw Vulnerability details Impact Tokens not compliant with the ERC20 specification could return false from the approve call to indicate the approval fails, while the calling contract would not notice the failure if the return value is not checked. Proof of Concept Referenced code:...

CVE-2021-34270

An integer overflow in the mintToken function of a smart contract implementation for Doftcoin Token, an Ethereum ERC20 token, allows the owner to cause unexpected financial losses...

CVE-2021-34273

A security flaw in the 'owned' function of a smart contract implementation for BTC2X B2X, a tradeable Ethereum ERC20 token, allows attackers to hijack victim accounts and arbitrarily increase the digital supply of assets...

CVE-2021-33403

An integer overflow in the transfer function of a smart contract implementation for Lancer Token, an Ethereum ERC20 token, allows the owner to cause unexpected financial losses between two large accounts during a transaction...

Integer overflow

An integer overflow in the transfer function of a smart contract implementation for Lancer Token, an Ethereum ERC20 token, allows the owner to cause unexpected financial losses between two large accounts during a transaction...

Integer overflow

An integer overflow in the mintToken function of a smart contract implementation for Doftcoin Token, an Ethereum ERC20 token, allows the owner to cause unexpected financial losses...

Security feature bypass

A security flaw in the 'owned' function of a smart contract implementation for RobotCoin RBTC, a tradeable Ethereum ERC20 token, allows attackers to hijack victim accounts and arbitrarily increase the digital supply of assets...

CVE-2021-34273

A security flaw in the 'owned' function of a smart contract implementation for BTC2X B2X, a tradeable Ethereum ERC20 token, allows attackers to hijack victim accounts and arbitrarily increase the digital supply of assets...

CVE-2021-34273

The CVE-2021-34273 entry describes a vulnerability in BTC2X (B2X), a tradable Ethereum ERC20 token. The issue is in the smart contract’s owned function, tied to “unprotected ownership,” which can enable an attacker to hijack a victim’s account and arbitrarily increase the token supply. Several so...

CVE-2021-34272

The CVE-2021-34272 entry concerns RobotCoin (RBTC), a tradeable Ethereum ERC20 token implemented via a smart contract. The vulnerability is in the contract’s owned function, described as enabling attackers to hijack victim accounts and arbitrarily increase the token’s digital supply. The connecte...

CVE-2021-34270

An integer overflow in the mintToken function of a smart contract implementation for Doftcoin Token, an Ethereum ERC20 token, allows the owner to cause unexpected financial losses...

CVE-2021-34270

The CVE-2021-34270 entry concerns Doftcoin Token (an Ethereum ERC20 token) with an integer overflow in the mintToken function. The vulnerability is an arithmetic overflow in the token minting path, potentially allowing the owner to cause financial losses; exploitation details are not provided in ...

CVE-2021-33403

The CVE concerns LNCToken (Lancer Token), an Ethereum ERC-20 token. The vulnerability is an integer overflow in the transfer function of the smart contract, which could allow the owner to cause unexpected financial losses between two large accounts during a transaction. The connected sources (inc...

CVE-2021-33403

An integer overflow in the transfer function of a smart contract implementation for Lancer Token, an Ethereum ERC20 token, allows the owner to cause unexpected financial losses between two large accounts during a transaction...

CVE-2021-33403: Integer Overflow or Wraparound

An integer overflow in the transfer function of a smart contract implementation for Lancer Token, an Ethereum ERC20 token, allows the owner to cause unexpected financial losses between two large accounts during a transaction...

CVE-2021-34270: Integer Overflow or Wraparound

An integer overflow in the mintToken function of a smart contract implementation for Doftcoin Token, an Ethereum ERC20 token, allows the owner to cause unexpected financial losses...

PT-2021-20134

Name of the Vulnerable Software and Affected Versions Lancer Token affected versions not specified Description The issue is related to an integer overflow in the transfer function of a smart contract implementation for an Ethereum ERC20 token. This allows the owner to cause unexpected financial...