CVE-2018-13081

The mintToken function of a smart contract implementation for GZS Token GZS, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

CVE-2018-13084

The mintToken function of a smart contract implementation for Good Time Coin GTY, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

CVE-2018-13091

The CVE-2018-13091 entry concerns a mintToken integer overflow in a SUMO (Sumocoin) smart contract on Ethereum. The vulnerability allows the contract owner to set an arbitrary user’s balance to any value, implying unauthenticated control over token balances and potential token manipulation. The a...

CVE-2018-13090

CVE-2018-13090 affects YiTongCoin (YTC), an Ethereum ERC20 token. The vulnerability is in the mintToken function, where an integer overflow can let the contract owner set any address balance to an arbitrary value. The issue is documented across multiple sources (NVD, Red Hat, CNVD, Prion, CVE lis...

CVE-2018-13086

The mintToken function of a smart contract implementation for IADOWR Coin IAD, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

CVE-2018-13072

The mintToken function of a smart contract implementation for Coffeecoin COFFEE, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

CVE-2018-13080

The CVE-2018-13080 entry concerns Goutex (GTX), an Ethereum token, where the mintToken function in the smart contract has an integer overflow vulnerability. This flaw allows the contract owner to electrobalance (set the balance of any arbitrary user to an arbitrary value). Root cause: integer ove...

CVE-2018-13079

The mintToken function of a smart contract implementation for GoodTo GTO, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

CVE-2018-13078

The mintToken function of a smart contract implementation for Jitech JTH, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

CVE-2018-13078

The CVE-2018-13078 entry concerns the Jitech (JTH) Ethereum token. A vulnerability in the mintToken function is caused by an integer overflow, which enables the contract owner to set the balance of any arbitrary address to a chosen value. This is documented across multiple sources (CNVD, RH, NVD,...

CVE-2018-13041

The mint function of a smart contract implementation for Link Platform LNK, an Ethereum ERC20 token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

CVE-2018-13041

The CVE-2018-13041 entry concerns Link Platform (LNK), an Ethereum ERC20 token. The vulnerability is an integer overflow in the mint function of the Link Platform smart contract, which can allow the contract owner to set the balance of an arbitrary user to any value. This is documented in multipl...

Free Thanatos Ransomware Decryption Tool Released

If your computer has been infected with Thanatos Ransomware and you are searching for a free ransomware decryption tool to unlock or decrypt your files—your search is over here. Security researchers at Cisco Talos have discovered a weakness in the Thanatos ransomware code that makes it possible f...

Files Cannot Be Decrypted? Challenge Accepted. Talos Releases ThanatosDecryptor

This blog post was authored by Edmund Brumaghin, Earl Carter and Andrew Williams. Executive summary Cisco Talos has analyzed Thanatos, a ransomware variant that is being distributed via multiple malware campaigns that have been conducted over the past few months. As a result of our research, we...

Buffer overflow

The sell function of a smart contract implementation for SEC, a tradable Ethereum ERC20 token, allows a potential trap that could be used to cause financial damage to the seller, because of overflow of the multiplication of its argument amount and a manipulable variable sellPrice, aka the...

CVE-2018-12067

The sell function of a smart contract implementation for Substratum SUB, a tradable Ethereum ERC20 token, allows a potential trap that could be used to cause financial damage to the seller, because of overflow of the multiplication of its argument amount and a manipulable variable sellPrice, aka...

Buffer overflow

The sell function of a smart contract implementation for Substratum SUB, a tradable Ethereum ERC20 token, allows a potential trap that could be used to cause financial damage to the seller, because of overflow of the multiplication of its argument amount and a manipulable variable sellPrice, aka...

CVE-2018-12062

The sell function of a smart contract implementation for SwftCoin SWFTC, a tradable Ethereum ERC20 token, allows a potential trap that could be used to cause financial damage to the seller, because of overflow of the multiplication of its argument amount and a manipulable variable sellPrice, aka...

CVE-2018-12081

The mintToken function of a smart contract implementation for Target Coin TGT, a tradable Ethereum ERC20 token, has no period constraint, which allows the owner to increase the total supply of the digital assets arbitrarily so as to make profits, aka the "tradeTrap" issue...

Design/Logic Flaw

The mintToken function of a smart contract implementation for Target Coin TGT, a tradable Ethereum ERC20 token, has no period constraint, which allows the owner to increase the total supply of the digital assets arbitrarily so as to make profits, aka the "tradeTrap" issue...