CVE-2018-11411

The transferFrom function of a smart contract implementation for DimonCoin FUD, an Ethereum ERC20 token, allows attackers to steal assets e.g., transfer all victims' balances into their account because certain computations involving value are incorrect...

CVE-2018-11329

The DrugDealer function of a smart contract implementation for Ether Cartel, an Ethereum game, allows attackers to take over the contract's ownership, aka ceoAnyone. After that, all the digital assets including Ether balance and tokens might be manipulated by the attackers, as exploited in the wi...

CVE-2018-11329

CVE-2018-11329 concerns the Ether Cartel smart contract, where the public function named DrugDealer governs ownership (ceoAddress). The vulnerability stems from this function acting as a constructor but incorrectly named, enabling an attacker to seize control of the contract and subsequently mani...

CVE-2018-11329

The DrugDealer function of a smart contract implementation for Ether Cartel, an Ethereum game, allows attackers to take over the contract's ownership, aka ceoAnyone. After that, all the digital assets including Ether balance and tokens might be manipulated by the attackers, as exploited in the wi...

VulnCheck KEV: CVE-2018-11329

The DrugDealer function of a smart contract implementation for Ether Cartel, an Ethereum game, allows attackers to take over the contract's ownership, aka ceoAnyone. After that, all the digital assets including Ether balance and tokens might be manipulated by the attackers, as exploited in...

Integer overflow

An integer overflow in the transfer function of a smart contract implementation for Hexagon HXG, an Ethereum ERC20 token, allows attackers to accomplish an unauthorized increase of digital assets by providing a to argument in conjunction with a large value argument, as exploited in the wild in Ma...

CVE-2018-11239

CVE-2018-11239 affects Hexagon (HXG), an Ethereum ERC20 token. The vulnerability is an integer overflow in the _transfer function, where _value + burnPerTransaction can overflow, bypassing balance checks and enabling an attacker to inflate the recipient’s balance. PeckShield reports a real-world ...

CVE-2018-11239

An integer overflow in the transfer function of a smart contract implementation for Hexagon HXG, an Ethereum ERC20 token, allows attackers to accomplish an unauthorized increase of digital assets by providing a to argument in conjunction with a large value argument, as exploited in the wild in Ma...

Meet MEWKit, a tricky phishing attack draining Ethereum wallets

By Waqas Another day, another phishing attack trying to steal Ethereum cryptocurrency but This is a post from HackRead.com Read the original post: Meet MEWKit, a tricky phishing attack draining Ethereum wallets...

CVE-2018-10944

The requestdividend function of a smart contract implementation for ROC aka Rasputin Online Coin, an Ethereum ERC20 token, allows attackers to steal all of the contract's Ether...

CVE-2018-10944

CVE-2018-10944 concerns ROC (Rasputin Online Coin), an Ethereum ERC20 token. The smart contract’s request_dividend() function is vulnerable: it computes holder_token_balance and holder_profit and then sends Ether to the address without updating the sender’s balance, and it is declared public with...

CVE-2018-10944

The requestdividend function of a smart contract implementation for ROC aka Rasputin Online Coin, an Ethereum ERC20 token, allows attackers to steal all of the contract's Ether...

CVE-2018-10973

An integer overflow in the transferMulti function of a smart contract implementation for KoreaShow, an Ethereum ERC20 token, allows attackers to accomplish an unauthorized increase of digital assets via crafted value parameters...

CVE-2018-10706

An integer overflow in the transferMulti function of a smart contract implementation for Social Chain SCA, an Ethereum ERC20 token, allows attackers to accomplish an unauthorized increase of digital assets, aka the "multiOverflow" issue...

Integer overflow

An integer overflow in the transferMulti function of a smart contract implementation for KoreaShow, an Ethereum ERC20 token, allows attackers to accomplish an unauthorized increase of digital assets via crafted value parameters...

Integer overflow

An integer overflow in the transferMulti function of a smart contract implementation for Social Chain SCA, an Ethereum ERC20 token, allows attackers to accomplish an unauthorized increase of digital assets, aka the "multiOverflow" issue...

CVE-2018-10973

KoreaShow (an Ethereum ERC20 token) is affected by CVE-2018-10973 due to an integer overflow in the transferMulti function. The vulnerability arises from accumulating _value into amount with a for loop and then transferring funds, allowing a crafted _value array to overflow the total and bypass b...

CVE-2018-10706

Summary: CVE-2018-10706 concerns an integer overflow in the transferMulti function of Social Chain (SCA) ERC20 smart contracts. The overflow allows an attacker to cause an unauthorized increase of tokens. The Seebug writeup describes the vulnerable transferMulti() function, where multiplying valu...

CVE-2018-10706

An integer overflow in the transferMulti function of a smart contract implementation for Social Chain SCA, an Ethereum ERC20 token, allows attackers to accomplish an unauthorized increase of digital assets, aka the "multiOverflow" issue...

CVE-2018-10973

An integer overflow in the transferMulti function of a smart contract implementation for KoreaShow, an Ethereum ERC20 token, allows attackers to accomplish an unauthorized increase of digital assets via crafted value parameters...