776 matches found
CVE-2018-12959
The approveAndCall function of a smart contract implementation for Aditus ADI, an Ethereum ERC20 token, allows attackers to steal assets e.g., transfer all contract balances into their account...
CVE-2018-12959
The CVE-2018-12959 entry concerns the approveAndCall function of a smart contract implementation for Aditus (ADI), an Ethereum ERC20 token. The description states that this function allows attackers to steal assets (e.g., transfer all contract balances into their account). The connected documents...
CVE-2018-14063
The increaseApproval function of a smart contract implementation for Tracto TRCT, an Ethereum ERC20 token, has an integer overflow...
Integer overflow
The increaseApproval function of a smart contract implementation for Tracto TRCT, an Ethereum ERC20 token, has an integer overflow...
CVE-2018-14063
The increaseApproval function of a smart contract implementation for Tracto TRCT, an Ethereum ERC20 token, has an integer overflow...
CVE-2018-14063
The CVE-2018-14063 vulnerability affects the Tracto (TRCT) ERC20 smart contract. The increaseApproval function uses an unsafe addition (allowed[msg.sender][_spender] += _addedValue) that can overflow, as shown in the exploitable code snippet. This indicates a root cause: integer overflow in the s...
MalaysianCoin Integer Overflow Vulnerability
MalaysianCoin is a tradable Ether ERC20 token. An integer overflow vulnerability exists in the transferAny function of MalaysianCoin's smart contract implementation. An attacker can exploit this vulnerability to set the balance of an arbitrary user...
Integer overflow
An wrong logical check identified in the transferFrom function of a smart contract implementation for RemiCoin RMC, an Ethereum ERC20 token, allows the attacker to steal tokens or conduct resultant integer underflow attacks...
CVE-2018-12230
An wrong logical check identified in the transferFrom function of a smart contract implementation for RemiCoin RMC, an Ethereum ERC20 token, allows the attacker to steal tokens or conduct resultant integer underflow attacks...
CVE-2018-12230
RemiCoin (RMC) is affected by a vulnerability in the transferFrom function of its smart contract (an Ethereum ERC20 token). The issue is described as a wrong logical check, which could enable an attacker to steal tokens and cause an integer underflow/overflow. The connected CNVD/NVD entries corro...
CVE-2018-12230
An wrong logical check identified in the transferFrom function of a smart contract implementation for RemiCoin RMC, an Ethereum ERC20 token, allows the attacker to steal tokens or conduct resultant integer underflow attacks...
CVE-2018-13646
The vulnerability is in the mintToken function of a Datiac Ethereum token smart contract, where an integer overflow enables the contract owner to set any user’s balance to an arbitrary value. The linked documents confirm the root cause (overflow in mintToken) and the impact (owner-controlled bala...
CVE-2018-13536
The CVE-2018-13536 entry concerns ERC20_ICO: mintToken in the smart contract exhibits an integer overflow. This weakness allows the contract owner to arbitrarily set any user’s balance. Affected component: mintToken in the ERC20_ICO contract. Root cause: integer overflow in the balance assignment...
Bugged Smart Contract FuturXE: How Could Someone Mess up with Boolean? (CVE-2018–12025)
Recently SECBIT team found a serious bug about the if condition in a deployed ERC20 smart contract called FuturXE FXE and here is the bugged part: //Function for transer the coin from one address to another function transferFromaddress from, address to, uint value returns bool success //checking...
Aurora IDEX Membership(IDXM), ERC20 Token, allows attackers to acquire contract ownership (CVE-2018–10666)
Abstract I found a new vulnerability in smart contract of IDXM Token CVE-2018–106661. Attackers can acquire contract ownership because the setOwner function is delcared as public. A new owner can subsequently bypass intended access restrictions by, for example, calling uploadBalances. Details In...
DimonCoin(FUD), ERC20 token, allows attackers to steal all victim’s balances (CVE-2018–11411)
Abstract I found a vulnerability of a smart contract for DimonCoinFUD, an Ethereum ERC20 token CVE-2018–114111. This vulnerability is exactly same with the UselessEthereumToken’s vulnerability2, 3. DimonCoin token also has the same vulnerable function which is transferFrom in UET token. Therefore...
New evilReflex Bug Identified in Multiple ERC20 Smart Contracts (CVE-2018-12702, CVE-2018-12703)
Update: 2018-06-24 With swift, coordinated response from Huobi.pro, we appreciate the announcement 11 on suspending the deposits and withdrawals of affected tokens! Our vulnerability-scanning system at PeckShield has so far discovered several dangerous smart contract vulnerabilities batchOverflow...
Full Disclosure of Highly-Manipulatable, tradeTrap-Affected ERC20 Tokens in Multiple Top Exchanges(CVE-2018-11446)
Update: 2018-06-12 The BMB BMB contract 0x0e935e976a47342a4aee5e32ecf2e7b59195e82f is NOT affected by tradeTrap. We sincerely apology for mistakenly listing it as a vulnerable ERC20 token. Quoted from our last blog 1, “publicly tradable ERC-20 tokens have considerable high market value. Various...
erc20 contract KoreaShow bug(CVE-2018-10973)
An integer overflow in the transferMulti function of a smart contract implementation for KoreaShow, an Ethereum ERC20 token, allows attackers to accomplish an unauthorized increase of digital assets via crafted value parameters. Lets see where this issue is: function transferMultiaddress to,...