CVE-2018-13083

The mintToken function of a smart contract implementation for Plaza Token PLAZA, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

CVE-2018-13092

The mintToken function of a smart contract implementation for Reimburse Token REIM, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

CVE-2018-13075

The mintToken function of a smart contract implementation for Carbon Exchange Coin Token CEC, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

CVE-2018-13091

The mintToken function of a smart contract implementation for sumocoin SUMO, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

CVE-2018-13080

The mintToken function of a smart contract implementation for Goutex GTX, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

CVE-2018-13074

The CVE-2018-13074 entry affects the mintToken function of the FIBToken Ethereum smart contract. The vulnerability is an integer overflow that allows the contract owner to set an arbitrary user’s balance to any value. Impact stated: arbitrary balance manipulation within the token; no broader syst...

CVE-2018-13085

The CVE-2018-13085 issue affects FreeCoin (FREE), an Ethereum token, where the mintToken function in its smart contract has an integer overflow vulnerability. The root cause allows the contract owner to set an arbitrary user’s balance to any value. This is described consistently across sources (N...

CVE-2018-13089

The mintToken function of a smart contract implementation for Universal Coin UCOIN, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

CVE-2018-13070

The mintToken function of a smart contract implementation for EncryptedToken ECC, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

CVE-2018-13080

The CVE-2018-13080 entry concerns Goutex (GTX), an Ethereum token, where the mintToken function in the smart contract has an integer overflow vulnerability. This flaw allows the contract owner to electrobalance (set the balance of any arbitrary user to an arbitrary value). Root cause: integer ove...

CVE-2018-13072

CVE-2018-13072 affects the Coffeecoin (COFFEE) Ethereum token. The mintToken function in Coffeecoin’s smart contract contains an integer overflow that enables the contract owner to set any user’s balance to an arbitrary value. Public sources in the connected records confirm the vulnerability desc...

CVE-2018-13091

The CVE-2018-13091 entry concerns a mintToken integer overflow in a SUMO (Sumocoin) smart contract on Ethereum. The vulnerability allows the contract owner to set an arbitrary user’s balance to any value, implying unauthenticated control over token balances and potential token manipulation. The a...

CVE-2018-13069

CVE-2018-13069 concerns the DYchain (DYC) smart contract where the mintToken function has an integer overflow. This overflow allows the contract owner to set the balance of any arbitrary user to any value. Documents consistently describe the vulnerability as an overflow in mintToken, enabling bal...

CVE-2018-13041

The CVE-2018-13041 entry concerns Link Platform (LNK), an Ethereum ERC20 token. The vulnerability is an integer overflow in the mint function of the Link Platform smart contract, which can allow the contract owner to set the balance of an arbitrary user to any value. This is documented in multipl...

CVE-2018-13041

The mint function of a smart contract implementation for Link Platform LNK, an Ethereum ERC20 token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

Free Thanatos Ransomware Decryption Tool Released

If your computer has been infected with Thanatos Ransomware and you are searching for a free ransomware decryption tool to unlock or decrypt your files—your search is over here. Security researchers at Cisco Talos have discovered a weakness in the Thanatos ransomware code that makes it possible f...

Files Cannot Be Decrypted? Challenge Accepted. Talos Releases ThanatosDecryptor

This blog post was authored by Edmund Brumaghin, Earl Carter and Andrew Williams. Executive summary Cisco Talos has analyzed Thanatos, a ransomware variant that is being distributed via multiple malware campaigns that have been conducted over the past few months. As a result of our research, we...

CVE-2018-12078

The mintToken function of a smart contract implementation for PolyAI AI, a tradable Ethereum ERC20 token, has no period constraint, which allows the owner to increase the total supply of the digital assets arbitrarily so as to make profits, aka the "tradeTrap" issue...

CVE-2018-12080

The mintToken function of a smart contract implementation for Internet Node Token INT, a tradable Ethereum ERC20 token, has no period constraint, which allows the owner to increase the total supply of the digital assets arbitrarily so as to make profits, aka the "tradeTrap" issue...

CVE-2018-12083

The mintToken function of a smart contract implementation for GOAL Bonanza GOAL, a tradable Ethereum ERC20 token, has no period constraint, which allows the owner to increase the total supply of the digital assets arbitrarily so as to make profits, aka the "tradeTrap" issue...