PT-2018-9887

Name of the Vulnerable Software and Affected Versions: Useless Ethereum Token UET affected versions not specified Description: The issue concerns a smart contract implementation for an Ethereum ERC20 token, where the transferFrom function allows attackers to steal assets by transferring all...

CVE-2018-10468: Improper Input Validation

The transferFrom function of a smart contract implementation for Useless Ethereum Token UET, an Ethereum ERC20 token, allows attackers to steal assets e.g., transfer all victims' balances into their account because certain computations involving value are incorrect, as exploited in the wild...

VulnCheck KEV: CVE-2018-10468

The transferFrom function of a smart contract implementation for Useless Ethereum Token UET, an Ethereum ERC20 token, allows attackers to steal assets e.g., transfer all victims' balances into their account because certain computations involving value are incorrect, as exploited in the wild...

New proxyOverflow Bug in Multiple ERC20 Smart Contracts (CVE-2018-10376)

On 4/24/2018, 01:17:50 p.m. UTC, PeckShield again detected an unusual MESH token transaction shown in Figure 1. In this particular transaction, someone transferred a large amount of MESH token — 0x8fff,ffff,ffff,ffff,ffff,ffff,ffff,ffff,ffff,ffff,ffff,ffff,ffff,ffff,ffff,ffff 63 f’s to herself...

New batchOverflow Bug in Multiple ERC20 Smart Contracts (CVE-2018–10299)

Built on our earlier efforts in analyzing EOS tokens, we have developed an automated system to scan and analyze Ethereum-based ERC-20 token transfers. Specifically, our system will automatically send out alerts if any suspicious transactions e.g., involving unreasonably large tokens occur. In...

CVE-2018-10376

An integer overflow in the transferProxy function of a smart contract implementation for SmartMesh aka SMT, an Ethereum ERC20 token, allows attackers to accomplish an unauthorized increase of digital assets via crafted fee and value parameters, as exploited in the wild in April 2018, aka the...

CVE-2018-10376

The SmartMesh (SMT) Ethereum ERC20 token is vulnerable to an integer overflow within the transferProxy (or proxyTransfer) function. Attackers can exploit this by providing specially crafted _fee and _value parameters; if the sum of these parameters overflows to zero, it can bypass sanity checks, ...

CVE-2018-10376

An integer overflow in the transferProxy function of a smart contract implementation for SmartMesh aka SMT, an Ethereum ERC20 token, allows attackers to accomplish an unauthorized increase of digital assets via crafted fee and value parameters, as exploited in the wild in April 2018, aka the...

SMT smart contract integer overflow vulnerability-vulnerability warning-the black bar safety net

! Vulnerability overview SmartMesh Token is based on the Ethereum contract tokens, referred to as SMT. Ethereum is an open source, public, distributed computing platform, SmartMesh tokens contract SmartMeshTokenContract based on ERC20Token standards. The vulnerability occurs in the transfer...

Integer overflow

An integer overflow in the batchTransfer function of a smart contract implementation for Beauty Ecosystem Coin BEC, the Ethereum ERC20 token used in the Beauty Chain economic system, allows attackers to accomplish an unauthorized increase of digital assets by providing two receivers arguments in...

CVE-2018-10299

An integer overflow in the batchTransfer function of a smart contract implementation for Beauty Ecosystem Coin BEC, the Ethereum ERC20 token used in the Beauty Chain economic system, allows attackers to accomplish an unauthorized increase of digital assets by providing two receivers arguments in...

CVE-2018-10299

An integer overflow in the batchTransfer function of a smart contract implementation for Beauty Ecosystem Coin BEC, the Ethereum ERC20 token used in the Beauty Chain economic system, allows attackers to accomplish an unauthorized increase of digital assets by providing two receivers arguments in...

CVE-2018-10299

The Beauty Ecosystem Coin (BEC) , an Ethereum ERC20 token, is vulnerable to an integer overflow in its batchTransfer function, known as the "batchOverflow" issue. An attacker can provide two _receivers arguments along with an extremely large _value argument to cause the calculated amount to overf...

VulnCheck KEV: CVE-2018-10299

An integer overflow in the batchTransfer function of a smart contract implementation for Beauty Ecosystem Coin BEC, the Ethereum ERC20 token used in the Beauty Chain economic system, allows attackers to accomplish an unauthorized increase of digital assets by providing two receivers arguments in...

Tens of thousands per Gram

Looking at Instagram one morning, I spotted several posts from some fairly well-known people in certain circles who had invested in an ICO held by Telegram. Interesting, I thought to myself. I fancy a piece of that. Only I was pretty sure that if Telegram was indeed holding an ICO, it would be a...

Hacker returns $17 million worth of stolen Ethereum

By Carolina In July of last year, an Israeli cryptocurrency venture called This is a post from HackRead.com Read the original post: Hacker returns $17 million worth of stolen Ethereum...

Security Vulnerabilities in Smart Contracts

Interesting research: "Finding The Greedy, Prodigal, and Suicidal Contracts at Scale": Abstract: Smart contracts -- stateful executable objects hosted on blockchains like Ethereum -- carry billions of dollars worth of coins and cannot be updated once deployed. We present a new systematic...

BeeToken’s ICO Hit by Phishing Scam; $1M worth of Ethereum Stolen

By Waqas The decentralized home sharing network The BeeToken customers have been This is a post from HackRead.com Read the original post: BeeToken’s ICO Hit by Phishing Scam; $1M worth of Ethereum Stolen...

Ethereum Startup Leaves Penis for Investors & Vanishes with $11

By Waqas Another Ethereum Startup Prodeum Vanished Into Thin Air After Collecting This is a post from HackRead.com Read the original post: Ethereum Startup Leaves Penis for Investors & Vanishes with $11...

Out-of-bounds

An exploitable information leak/denial of service vulnerability exists in the libevm Ethereum Virtual Machine create2 opcode handler of CPP-Ethereum. A specially crafted smart contract code can cause an out-of-bounds read leading to memory disclosure or denial of service. An attacker can...