EpiphanyCoin has a flawed logic vulnerability

EpiphanyCoin is an ethereum-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in EpiphanyCoin's smart contract implementation. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...

BuyerToken has a flawed logic vulnerability

BuyerToken is an ethereum-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in the smart contract implementation of BuyerToken. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...

GSI has a logic flaw vulnerability

GSI is an Ether-based digital currency. An integer overflow vulnerability exists in the 'sell' function of GSI's smart contract implementation. An attacker could exploit the vulnerability to prevent the seller from accessing the assets due to the exchange...

PaulyCoin has a logic flaw vulnerability

PaulyCoin is an ethereum-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in PaulyCoin's smart contract implementation. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...

EPPCOIN Logic Flaw Vulnerability

EPPCOIN EPP is an ethereum-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in EPP's smart contract implementation. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...

Denial Of Service (DoS)

github.com/ethereum/go-ethereum is vulnerable to denial of service DoS attacks. The vulnerability is possible when 'TransactionInBlock' function in ethclient.go tries to access the fields From and BlockHash of an uninitialized JSON object allowing an attacker to cause an application crash...

CVE-2020-5232 Ethereum Name Service - Malicious takeover of previously owned ENS names

A user who owns an ENS domain can set a trapdoor, allowing them to transfer ownership to another user, and later regain ownership without the new owners consent or awareness. A new ENS deployment is being rolled out that fixes this vulnerability in the ENS registry...

PT-2020-18328 · Ethereum · Ethereum Name Service (Ens) Registry

Name of the Vulnerable Software and Affected Versions: Ethereum Name Service ENS registry affected versions not specified Description: A user who owns an ENS domain can set a trapdoor, allowing them to transfer ownership to another user, and later regain ownership without the new owner's consent ...

Oski Data-Stealing Malware Emerges to Target North America, China

An emergent and effective data-harvesting tool dubbed Oski is proliferating in North America and China, stealing online account credentials, credit-card numbers, cryptowallet accounts and more. Oski, likely a Finnish or Nordic variant of the word Oska, meaning “Viking warrior or god” in Samoan,...

Chrome Extension Stealing Cryptocurrency Keys and Passwords

A malicious Chrome extension surreptitiously steals Ethereum keys and passwords: According to Denley, the extension is dangerous to users in two ways. First, any funds ETH coins and ERC0-based tokens managed directly inside the extension are at risk. Denley says that the extension sends the priva...

CVE-2018-19831

The ToOwner function of a smart contract implementation for Cryptbond Network CBN, an tradable Ethereum ERC20 token, allows attackers to change the owner of the contract, because the function does not check the caller's identity...

CVE-2018-19834

The quaker function of a smart contract implementation for BOMBBA BOMB, an tradable Ethereum ERC20 token, allows attackers to change the owner of the contract, because the function does not check the caller's identity...

CVE-2018-19833

The owned function of a smart contract implementation for DDQ, an tradable Ethereum ERC20 token, allows attackers to change the owner of the contract, because the function does not check the caller's identity...

CVE-2018-19832

The NETM function of a smart contract implementation for NewIntelTechMedia NETM, an tradable Ethereum ERC20 token, allows attackers to change the owner of the contract, because the function does not check the caller's identity...

Default credentials

The UBSexToken function of a smart contract implementation for Business Alliance Financial Circle BAFC, an tradable Ethereum ERC20 token, allows attackers to change the owner of the contract, because the function is public by default and does not check the caller's identity...

Code injection

The quaker function of a smart contract implementation for BOMBBA BOMB, an tradable Ethereum ERC20 token, allows attackers to change the owner of the contract, because the function does not check the caller's identity...

Code injection

The NETM function of a smart contract implementation for NewIntelTechMedia NETM, an tradable Ethereum ERC20 token, allows attackers to change the owner of the contract, because the function does not check the caller's identity...

Code injection

The ToOwner function of a smart contract implementation for Cryptbond Network CBN, an tradable Ethereum ERC20 token, allows attackers to change the owner of the contract, because the function does not check the caller's identity...

Design/Logic Flaw

The owned function of a smart contract implementation for DDQ, an tradable Ethereum ERC20 token, allows attackers to change the owner of the contract, because the function does not check the caller's identity...

CVE-2018-19833

The CVE-2018-19833 entry concerns the DDQ smart contract (ERC20) where the function that sets/owners can be invoked by anyone because there is no caller identity check. Connected CNVD records (e.g., CNVD-2020-03511 describing DDQ override vulnerability) reiterate that the DDQ implementation’s own...