CVE-2018-11411

DimonCoin (FUD) ERC20 token vulnerable in transferFrom due to incorrect _value computation, enabling overflow to let an attacker steal victims’ balances; no patch details provided in the available documents.

CVE-2018-11411: Improper Input Validation

The transferFrom function of a smart contract implementation for DimonCoin FUD, an Ethereum ERC20 token, allows attackers to steal assets e.g., transfer all victims' balances into their account because certain computations involving value are incorrect...

Integer overflow

An integer overflow in the transfer function of a smart contract implementation for Hexagon HXG, an Ethereum ERC20 token, allows attackers to accomplish an unauthorized increase of digital assets by providing a to argument in conjunction with a large value argument, as exploited in the wild in Ma...

CVE-2018-11239

An integer overflow in the transfer function of a smart contract implementation for Hexagon HXG, an Ethereum ERC20 token, allows attackers to accomplish an unauthorized increase of digital assets by providing a to argument in conjunction with a large value argument, as exploited in the wild in Ma...

CVE-2018-11239

An integer overflow in the transfer function of a smart contract implementation for Hexagon HXG, an Ethereum ERC20 token, allows attackers to accomplish an unauthorized increase of digital assets by providing a to argument in conjunction with a large value argument, as exploited in the wild in Ma...

CVE-2018-11239

The Hexagon (HXG) Ethereum ERC20 token is vulnerable to an integer overflow in its _transfer function, known as the "burnOverflow" issue. By providing a large _value argument (e.g., 0xffff...fffe) in conjunction with a _to argument, an attacker can trigger an overflow when the contract calculates...

CVE-2018-11239: Integer Overflow or Wraparound

An integer overflow in the transfer function of a smart contract implementation for Hexagon HXG, an Ethereum ERC20 token, allows attackers to accomplish an unauthorized increase of digital assets by providing a to argument in conjunction with a large value argument, as exploited in the wild in Ma...

Design/Logic Flaw

The requestdividend function of a smart contract implementation for ROC aka Rasputin Online Coin, an Ethereum ERC20 token, allows attackers to steal all of the contract's Ether...

CVE-2018-10944

The requestdividend function of a smart contract implementation for ROC aka Rasputin Online Coin, an Ethereum ERC20 token, allows attackers to steal all of the contract's Ether...

CVE-2018-10944

CVE-2018-10944 concerns ROC (Rasputin Online Coin), an Ethereum ERC20 token. The smart contract’s request_dividend() function is vulnerable: it computes holder_token_balance and holder_profit and then sends Ether to the address without updating the sender’s balance, and it is declared public with...

Integer overflow

An integer overflow in the transferMulti function of a smart contract implementation for Social Chain SCA, an Ethereum ERC20 token, allows attackers to accomplish an unauthorized increase of digital assets, aka the "multiOverflow" issue...

Integer overflow

An integer overflow in the transferMulti function of a smart contract implementation for KoreaShow, an Ethereum ERC20 token, allows attackers to accomplish an unauthorized increase of digital assets via crafted value parameters...

CVE-2018-10973

An integer overflow in the transferMulti function of a smart contract implementation for KoreaShow, an Ethereum ERC20 token, allows attackers to accomplish an unauthorized increase of digital assets via crafted value parameters...

CVE-2018-10706

An integer overflow in the transferMulti function of a smart contract implementation for Social Chain SCA, an Ethereum ERC20 token, allows attackers to accomplish an unauthorized increase of digital assets, aka the "multiOverflow" issue...

CVE-2018-10706

An integer overflow in the transferMulti function of a smart contract implementation for Social Chain SCA, an Ethereum ERC20 token, allows attackers to accomplish an unauthorized increase of digital assets, aka the "multiOverflow" issue...

CVE-2018-10973

An integer overflow in the transferMulti function of a smart contract implementation for KoreaShow, an Ethereum ERC20 token, allows attackers to accomplish an unauthorized increase of digital assets via crafted value parameters...

CVE-2018-10973

KoreaShow (an Ethereum ERC20 token) is affected by CVE-2018-10973 due to an integer overflow in the transferMulti function. The vulnerability arises from accumulating _value into amount with a for loop and then transferring funds, allowing a crafted _value array to overflow the total and bypass b...

CVE-2018-10973: Integer Overflow or Wraparound

An integer overflow in the transferMulti function of a smart contract implementation for KoreaShow, an Ethereum ERC20 token, allows attackers to accomplish an unauthorized increase of digital assets via crafted value parameters...

Code injection

The Owned smart contract implementation for Aurora DAO AURA, an Ethereum ERC20 token, allows attackers to acquire contract ownership because the setOwner function is declared as public. An attacker can then conduct a lockBalances denial of service attack...

CVE-2018-10705

The Owned smart contract implementation for Aurora DAO AURA, an Ethereum ERC20 token, allows attackers to acquire contract ownership because the setOwner function is declared as public. An attacker can then conduct a lockBalances denial of service attack...