Ethereum Classic (ETC) Hit by Double-Spend Attack Worth $1.1 Million

Popular cryptocurrency exchange Coinbase has suspended all transactions of Ethereum Classic ETC—the original unforked version of the Ethereum network—on their trading platforms, other products and services after detecting a potential attack on the cryptocurrency network that let someone spend the...

Integer overflow

The mintToken function of Nexxus NXX aka NexxusToken, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

CVE-2018-18667

The mintToken function of Pylon PYLNT aka PylonToken, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value, a related issue to CVE-2018-11812...

Integer overflow

The mintToken function of Pylon PYLNT aka PylonToken, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value, a related issue to CVE-2018-11812...

Integer overflow

The mintToken function of SwftCoin SWFTC aka SwftCoin, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

CVE-2018-18666

The mintToken function of SwftCoin SWFTC aka SwftCoin, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

CVE-2018-18665

The mintToken function of Nexxus NXX aka NexxusToken, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

CVE-2018-18665

The CVE-2018-18665 entry concerns Nexxus/NexxusToken (Ethereum token). The mintToken function is reported to contain an integer overflow that allows the contract owner to set any user’s balance to an arbitrary value. This is the stated vulnerability without additional details on affected versions...

CVE-2018-18667

CVE-2018-18667 concerns PylonToken (PYLNT) mintToken: an integer overflow enables the contract owner to set any user’s balance to an arbitrary value, a vulnerability related to CVE-2018-11812. The issue affects the token’s accounting integrity (high impact per CVSS 3.0), with no public exploitati...

CVE-2018-18665

The mintToken function of Nexxus NXX aka NexxusToken, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

CVE-2018-18666

The mintToken function of SwftCoin SWFTC aka SwftCoin, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

CVE-2018-18667

The mintToken function of Pylon PYLNT aka PylonToken, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value, a related issue to CVE-2018-11812...

CVE-2018-18666

The CVE pertains to SwftCoin (SWFTC); the mintToken function has an integer overflow in this Ethereum token contract. This overflow allows the contract owner to set an arbitrary user’s balance to any value, enabling potential manipulation of token balances. The description does not provide explic...

CVE-2018-17987

The determineWinner function of a smart contract implementation for HashHeroes Tiles, an Ethereum game, uses a certain blockhash value in an attempt to generate a random number for the case where NUMTILES equals the number of people who purchased a tile, which allows an attacker to control the...

CVE-2018-17987

HashHeroes Tiles is affected by CVE-2018-17987 in the determineWinner function of its Ethereum smart contract. The vulnerability arises from using a blockhash value to generate a random number when NUM_TILES equals the number of tile Purchases, enabling an attacker to influence the prize by being...

CVE-2018-17987

The determineWinner function of a smart contract implementation for HashHeroes Tiles, an Ethereum game, uses a certain blockhash value in an attempt to generate a random number for the case where NUMTILES equals the number of people who purchased a tile, which allows an attacker to control the...

CVE-2018-20421

Go Ethereum aka geth 1.8.19 allows attackers to cause a denial of service memory consumption by rewriting the length of a dynamic array in memory, and then writing data to a single memory location with a large index number, as demonstrated by use of "assembly mstore " followed by a "c0xC800000 =...

Code injection

Go Ethereum aka geth 1.8.19 allows attackers to cause a denial of service memory consumption by rewriting the length of a dynamic array in memory, and then writing data to a single memory location with a large index number, as demonstrated by use of "assembly mstore " followed by a "c0xC800000 =...

CVE-2018-20421

Go Ethereum aka geth 1.8.19 allows attackers to cause a denial of service memory consumption by rewriting the length of a dynamic array in memory, and then writing data to a single memory location with a large index number, as demonstrated by use of "assembly mstore " followed by a "c0xC800000 =...

CVE-2018-20421

Go Ethereum aka geth 1.8.19 allows attackers to cause a denial of service memory consumption by rewriting the length of a dynamic array in memory, and then writing data to a single memory location with a large index number, as demonstrated by use of "assembly mstore " followed by a "c0xC800000 =...