1209 matches found
CVE-2018-14576
The CVE-2018-14576 entry concerns an integer overflow in the mintTokens function of a SunContract Ethereum token smart contract, triggered via the _amount variable. Documents in the connected set corroborate this overflow condition and point to SunContract’s token contract as the affected compone...
CVE-2018-14576
The mintTokens function of a smart contract implementation for SunContract, an Ethereum token, has an integer overflow via the amount variable...
Code injection
An issue was discovered in a smart contract implementation for UserWallet 0x0a7bca9FB7AfF26c6ED8029BB6f0F5D291587c42, an Ethereum token. First, suppose that the owner adds the evil contract address to his sweepers. The evil contract looks like this: contract Exploit uint public start; function...
CVE-2018-14089
An issue was discovered in a smart contract implementation for VirgoZodiacToken, an Ethereum token. In this contract, 'bool sufficientAllowance = allowance =' which was intended. An attacker can transfer from any address to his address, and does not need to meet the 'allowance value' condition...
CVE-2018-14086
An issue was discovered in a smart contract implementation for SingaporeCoinOrigin SCO, an Ethereum token. The contract has an integer overflow. If the owner sets the value of sellPrice to a large number in setPrices then the "amount sellPrice" will cause an integer overflow in sell...
CVE-2018-14088
An issue was discovered in a smart contract implementation for STeX White List STEWL, an Ethereum token. The contract has an integer overflow. If the owner sets the value of amount to a large number then the "amount 1000000000000000" will cause an integer overflow in withdrawToFounders...
Design/Logic Flaw
An issue was discovered in a smart contract implementation for VirgoZodiacToken, an Ethereum token. In this contract, 'bool sufficientAllowance = allowance =' which was intended. An attacker can transfer from any address to his address, and does not need to meet the 'allowance value' condition...
CVE-2018-14088
The CVE-2018-14088 issue affects the STeX White List (STE(WL)) Ethereum token smart contract. A vulnerability in withdrawToFounders() arises from an integer overflow when the owner sets amount to a large value, causing amount * 1000000000000000 to overflow. The available sources confirm the overf...
CVE-2018-14088
An issue was discovered in a smart contract implementation for STeX White List STEWL, an Ethereum token. The contract has an integer overflow. If the owner sets the value of amount to a large number then the "amount 1000000000000000" will cause an integer overflow in withdrawToFounders...
CVE-2018-14089
An issue was discovered in a smart contract implementation for VirgoZodiacToken, an Ethereum token. In this contract, 'bool sufficientAllowance = allowance =' which was intended. An attacker can transfer from any address to his address, and does not need to meet the 'allowance value' condition...
CVE-2018-14085
An issue was discovered in a smart contract implementation for UserWallet 0x0a7bca9FB7AfF26c6ED8029BB6f0F5D291587c42, an Ethereum token. First, suppose that the owner adds the evil contract address to his sweepers. The evil contract looks like this: contract Exploit uint public start; function...
CVE-2018-14087
An issue was discovered in a smart contract implementation for EUC EUC, an Ethereum token. The contract has an integer overflow. If the owner sets the value of buyPrice to a large number in setPrices then the "msg.value buyPrice" will cause an integer overflow in the fallback function...
NGToken Integer Overflow Vulnerability
NGToken is a tradable Ether ERC20 token. An integer overflow vulnerability exists in the multipleTransfer function of NGToken's smart contract implementation. An attacker can exploit this vulnerability to set the balance of an arbitrary user...
CVE-2018-14005
An integer overflow vulnerability exists in the function transferAny of Malaysia coins Xmc, an Ethereum token smart contract. An attacker could use it to set any user's balance...
Integer overflow
An integer overflow vulnerability exists in the function transferAny of Malaysia coins Xmc, an Ethereum token smart contract. An attacker could use it to set any user's balance...
CVE-2018-14003
An integer overflow vulnerability exists in the function batchTransfer of WeMediaChain WMC, an Ethereum token smart contract. An attacker could use it to set any user's balance...
CVE-2018-14001
An integer overflow vulnerability exists in the function batchTransfer of SHARKTECH SKT, an Ethereum token smart contract. An attacker could use it to set any user's balance...
CVE-2018-14002
An integer overflow vulnerability exists in the function distribute of MP3 Coin MP3, an Ethereum token smart contract. An attacker could use it to set any user's balance...