3579 matches found
Bitcoin Red Integer Overflow Vulnerability
Bitcoin Red BTCR is an Ether-based digital currency. An integer overflow vulnerability exists in the 'distributeBTR' function in BTCR's smart contract implementation. An attacker can exploit the vulnerability to increase the balance of their own account...
All For One Information Disclosure Vulnerability
All For One is an Ether-based gambling game. An information disclosure vulnerability exists in the 'maxRandom' function in All For One's smart contract implementation, which stems from the program's use of publicly readable variables to generate arbitrary values. An attacker could use the...
Design/Logic Flaw
The maxRandom function of a smart contract implementation for All For One, an Ethereum gambling game, generates a random value with publicly readable variables because the seed value can be retrieved with a getStorageAt call. Therefore, it allows attackers to always win and get rewards...
Integer overflow
An integer overflow in the distributeBTR function of a smart contract implementation for Bitcoin Red BTCR, an Ethereum ERC20 token, allows the owner to accomplish an unauthorized increase of digital assets by providing a large address array, as exploited in the wild in May 2018, aka the...
CVE-2018-11687
An integer overflow in the distributeBTR function of a smart contract implementation for Bitcoin Red BTCR, an Ethereum ERC20 token, allows the owner to accomplish an unauthorized increase of digital assets by providing a large address array, as exploited in the wild in May 2018, aka the...
CVE-2018-12056
The maxRandom function of a smart contract implementation for All For One, an Ethereum gambling game, generates a random value with publicly readable variables because the seed value can be retrieved with a getStorageAt call. Therefore, it allows attackers to always win and get rewards...
CVE-2018-11687
CVE-2018-11687 concerns Bitcoin Red (BTCR) ERC20 smart contracts. The issue is an integer overflow in the contract’s distributeBTR function, enabling the owner to unethically increase their balance by deploying a large address[] array. Descriptions in multiple sources confirm the vulnerability in...
CVE-2018-12056
Affected software: All For One’s Ethereum-based gambling contract. Vulnerability: The maxRandom function generates a random value using publicly readable variables because the _seed can be retrieved with getStorageAt, enabling attackers to predict the outcome. Impact: Attackers could always win a...
CVE-2018-12056
The maxRandom function of a smart contract implementation for All For One, an Ethereum gambling game, generates a random value with publicly readable variables because the seed value can be retrieved with a getStorageAt call. Therefore, it allows attackers to always win and get rewards...
CVE-2018-11687
An integer overflow in the distributeBTR function of a smart contract implementation for Bitcoin Red BTCR, an Ethereum ERC20 token, allows the owner to accomplish an unauthorized increase of digital assets by providing a large address array, as exploited in the wild in May 2018, aka the...
MyCryptoChamp Information Disclosure Vulnerability
MyCryptoChamp is an ethereum-based blockchain game. An information disclosure vulnerability exists in the 'randMod' function in MyCryptoChamp's smart contract implementation, which stems from the fact that the 'randMod' function generates a publicly readable variable containing a public readable...
CVE-2018-11561
An integer overflow in the unprotected distributeToken function of a smart contract implementation for EETHER EETHER, an Ethereum ERC20 token, will lead to an unauthorized increase of an attacker's digital assets...
Integer overflow
An integer overflow in the unprotected distributeToken function of a smart contract implementation for EETHER EETHER, an Ethereum ERC20 token, will lead to an unauthorized increase of an attacker's digital assets...
CVE-2018-11561
An integer overflow in the unprotected distributeToken function of a smart contract implementation for EETHER EETHER, an Ethereum ERC20 token, will lead to an unauthorized increase of an attacker's digital assets...
CVE-2018-11561
CVE-2018-11561 affects the EETHER ERC20 smart contract; an integer overflow in the unprotected distributeToken function enables an attacker to illegitimately increase their digital assets. The vulnerability is described in multiple sources (NVD/CNVD) as a token-amount overflow in the distributeTo...
CVE-2018-12885
The randMod function of the smart contract implementation for MyCryptoChamp, an Ethereum game, generates a random value with publicly readable variables such as the current block information and a private variable, which can be read with a getStorageAt call. Therefore, attackers can get powerful...
Design/Logic Flaw
The randMod function of the smart contract implementation for MyCryptoChamp, an Ethereum game, generates a random value with publicly readable variables such as the current block information and a private variable, which can be read with a getStorageAt call. Therefore, attackers can get powerful...
CVE-2018-12885
No technical details about CVE-2018-12885 are present in the provided connected documents. Technical specifics, affected products, or remediation are not publicly available here; monitor for updates.
CVE-2018-12885
The randMod function of the smart contract implementation for MyCryptoChamp, an Ethereum game, generates a random value with publicly readable variables such as the current block information and a private variable, which can be read with a getStorageAt call. Therefore, attackers can get powerful...
CVE-2018-13877
The doPayouts function of the smart contract implementation for MegaCryptoPolis, an Ethereum game, has a Denial of Service vulnerability. If a smart contract that has a fallback function always causing exceptions buys a land, users cannot buy lands near that contract's land, because those purchas...