Lucene search
+L

6 matches found

CNVD
CNVD
•added 2020/05/06 12:00 a.m.•12 views

Gold Reward has a flawed logic vulnerability

Gold Reward GRX is an ethereum-based virtual currency.A security vulnerability in the 'sell' function in the smart contract implementation of GRX arises from the ability of an attacker to specify a selling price. The vulnerability can be exploited by an attacker to cause financial loss to the buy...

6.8AI score
SaveExploits0
Prion
Prion
•added 2018/06/25 11:29 a.m.•20 views

Buffer overflow

The buy function of a smart contract implementation for Gold Reward GRX, an Ethereum ERC20 token, allows a potential trap that could be used to cause financial damage to the buyer because of overflow of the multiplication of its argument amount and a manipulable variable buyPrice, aka the...

5CVSS7.6AI score0.0089EPSS
SaveExploits1References1
NVD
NVD
•added 2018/06/25 11:29 a.m.•20 views

CVE-2018-11446

The buy function of a smart contract implementation for Gold Reward GRX, an Ethereum ERC20 token, allows a potential trap that could be used to cause financial damage to the buyer because of overflow of the multiplication of its argument amount and a manipulable variable buyPrice, aka the...

7.5CVSS7.6AI score0.0089EPSS
SaveExploits1References1
CVE
CVE
•added 2018/06/25 11:00 a.m.•60 views

CVE-2018-11446

CVE-2018-11446 describes a tradeTrap in the Gold Reward (GRX) ERC20 contract where the buy() path multiplies amount by buyPrice without SafeMath, enabling an overflow that can trap funds. The owner can set buyPrice via setPrices(), potentially manipulating prices and enabling arbitrage-like explo...

7.5CVSS7.5AI score0.0089EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2018/06/25 11:00 a.m.•32 views

CVE-2018-11446

The buy function of a smart contract implementation for Gold Reward GRX, an Ethereum ERC20 token, allows a potential trap that could be used to cause financial damage to the buyer because of overflow of the multiplication of its argument amount and a manipulable variable buyPrice, aka the...

7.6AI score0.0089EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/06/25 12:00 a.m.•2 views

CVE-2018-11446: Integer Overflow or Wraparound

The buy function of a smart contract implementation for Gold Reward GRX, an Ethereum ERC20 token, allows a potential trap that could be used to cause financial damage to the buyer because of overflow of the multiplication of its argument amount and a manipulable variable buyPrice, aka the...

7.5CVSS7.3AI score0.0089EPSS
SaveExploits1References2
Rows per page
Query Builder