CVE-2018-19831

The ToOwner function of a smart contract implementation for Cryptbond Network CBN, an tradable Ethereum ERC20 token, allows attackers to change the owner of the contract, because the function does not check the caller's identity...

CVE-2018-19832

The NETM function of a smart contract implementation for NewIntelTechMedia NETM, an tradable Ethereum ERC20 token, allows attackers to change the owner of the contract, because the function does not check the caller's identity...

CVE-2018-19832

NETM (NewIntelTechMedia) smart contract contains an override vulnerability in the quaker function that fails to verify the caller’s identity, enabling an attacker to change the contract owner. Root cause: missing access control in quaker; impact: owner can be modified. No remediation or exploit d...

CVE-2018-19830

The UBSexToken function of a smart contract implementation for Business Alliance Financial Circle BAFC, an tradable Ethereum ERC20 token, allows attackers to change the owner of the contract, because the function is public by default and does not check the caller's identity...

CVE-2018-19830

Summary: CVE-2018-19830 affects the BAFC smart contract on Ethereum (ERC20 token). The UBSexToken() function is publicly callable and does not verify the caller’s identity, enabling an attacker to change the contract owner. Connected CNVD entries confirm an overreach/owner modification vulnerabil...

CVE-2018-19834

The quaker function of a smart contract implementation for BOMBBA BOMB, an tradable Ethereum ERC20 token, allows attackers to change the owner of the contract, because the function does not check the caller's identity...

CVE-2018-19834

The CVE-2018-19834 entry concerns a vulnerability in the smart contract quaker function that allows an attacker to change the contract owner due to lack of caller identity checks. Connected documents describe a recurring pattern across multiple ERC20-like contracts (e.g., BAFC, CBN, NETM, DDQ) wh...

CVE-2018-19833: Improper Authentication

The owned function of a smart contract implementation for DDQ, an tradable Ethereum ERC20 token, allows attackers to change the owner of the contract, because the function does not check the caller's identity...

CVE-2018-19834: Improper Authentication

The quaker function of a smart contract implementation for BOMBBA BOMB, an tradable Ethereum ERC20 token, allows attackers to change the owner of the contract, because the function does not check the caller's identity...

PT-2019-9930

Name of the Vulnerable Software and Affected Versions DDQ smart contract implementation affected versions not specified Description The issue concerns a smart contract implementation for DDQ, an Ethereum ERC20 token. It allows attackers to change the owner of the contract because the owned functi...

CVE-2018-19832: Improper Authentication

The NETM function of a smart contract implementation for NewIntelTechMedia NETM, an tradable Ethereum ERC20 token, allows attackers to change the owner of the contract, because the function does not check the caller's identity...

CVE-2018-19830: Missing Authorization

The UBSexToken function of a smart contract implementation for Business Alliance Financial Circle BAFC, an tradable Ethereum ERC20 token, allows attackers to change the owner of the contract, because the function is public by default and does not check the caller's identity...

Slither v0.6.7 - Static Analyzer For Solidity

Slither is a Solidity static analysis framework written in Python 3. It runs a suite of vulnerability detectors, prints visual information about contract details, and provides an API to easily write custom analyses. Slither enables developers to find vulnerabilities, enhance their code...

CVE-2018-12511

In the mintToken function of a smart contract implementation for Substratum SUB, an Ethereum ERC20 token, the administrator can control mintedAmount, leverage an integer overflow, and modify a user account's balance arbitrarily...

CVE-2018-12511

In the mintToken function of a smart contract implementation for Substratum SUB, an Ethereum ERC20 token, the administrator can control mintedAmount, leverage an integer overflow, and modify a user account's balance arbitrarily...

CVE-2018-12511

The CVE-2018-12511 entry concerns Substratum (SUB) ERC-20 smart contracts. The vulnerability is in the mintToken function, where an administrator can control mintedAmount, exploit an integer overflow, and arbitrarily modify a user’s balance. This implies a privileged deniation of minting and pote...

CVE-2018-17111

The onlyOwner modifier of a smart contract implementation for Coinlancer CL, an Ethereum ERC20 token, has a potential access control vulnerability. All contract users can access functions that use this onlyOwner modifier, because the comparison between msg.sender and owner is incorrect...

CVE-2018-17111

The CVE-2018-17111 entry concerns Coinlancer (CL) Ethereum ERC20 contract where the onlyOwner modifier has an incorrect comparison between msg.sender and owner, making functions protected by onlyOwner accessible to all contract users. Documents consistently cite this as an access-control vulnerab...

CVE-2018-17111: Undefined Security Weakness

The onlyOwner modifier of a smart contract implementation for Coinlancer CL, an Ethereum ERC20 token, has a potential access control vulnerability. All contract users can access functions that use this onlyOwner modifier, because the comparison between msg.sender and owner is incorrect...

PT-2018-13903

Name of the Vulnerable Software and Affected Versions Coinlancer CL affected versions not specified Description The issue concerns a smart contract implementation for an Ethereum ERC20 token. It involves an access control problem with the onlyOwner modifier. Due to an incorrect comparison between...