CVE-2021-3004

The deposit function in the smart contract implementation for Stable Yield Credit yCREDIT, an Ethereum token, has certain incorrect calculations. An attacker can obtain more yCREDIT tokens than they should...

CVE-2021-3004

Technical details about CVE-2021-3004 are not present in the connected documents. The description notes incorrect calculations in the yCREDIT deposit function, but no vendor/version/exploit specifics are supplied here; monitor for updates.

CVE-2019-15080

An issue was discovered in a smart contract implementation for MORPH Token through 2019-06-05, an Ethereum token. A typo in the constructor of the Owned contract which is inherited by MORPH Token allows attackers to acquire contract ownership. A new owner can subsequently obtain MORPH Tokens for...

CVE-2019-15080

An issue was discovered in a smart contract implementation for MORPH Token through 2019-06-05, an Ethereum token. A typo in the constructor of the Owned contract which is inherited by MORPH Token allows attackers to acquire contract ownership. A new owner can subsequently obtain MORPH Tokens for...

CVE-2019-15079

A typo exists in the constructor of a smart contract implementation for EAI through 2019-06-05, an Ethereum token. This vulnerability could be used by an attacker to acquire EAI tokens for free...

CVE-2019-15078

An issue was discovered in a smart contract implementation for AIRDROPX BORN through 2019-05-29, an Ethereum token. The name of the constructor has a typo wrong case: XBornID versus XBORNID that allows an attacker to change the owner of the contract and obtain cryptocurrency for free...

Double free

A typo exists in the constructor of a smart contract implementation for EAI through 2019-06-05, an Ethereum token. This vulnerability could be used by an attacker to acquire EAI tokens for free...

Code injection

An issue was discovered in a smart contract implementation for MORPH Token through 2019-06-05, an Ethereum token. A typo in the constructor of the Owned contract which is inherited by MORPH Token allows attackers to acquire contract ownership. A new owner can subsequently obtain MORPH Tokens for...

Design/Logic Flaw

An issue was discovered in a smart contract implementation for AIRDROPX BORN through 2019-05-29, an Ethereum token. The name of the constructor has a typo wrong case: XBornID versus XBORNID that allows an attacker to change the owner of the contract and obtain cryptocurrency for free...

CVE-2019-15080

An issue was discovered in a smart contract implementation for MORPH Token through 2019-06-05, an Ethereum token. A typo in the constructor of the Owned contract which is inherited by MORPH Token allows attackers to acquire contract ownership. A new owner can subsequently obtain MORPH Tokens for...

CVE-2019-15080

The CVE describes a vulnerability in MORPH Token (Ethereum) where a typo in the constructor of the Owned contract, inherited by MORPH Token, allows an attacker to acquire contract ownership. This new owner can obtain MORPH Tokens for free and can trigger a DoS attack. Details are limited to the d...

CVE-2019-15079

Technical details (affected product, vulnerable component, root cause specifics, impact, or patch information) are not provided in the supplied documents. Monitor for updates.

CVE-2019-15078

The CVE-2019-15078 issue affects the AIRDROPX BORN Ethereum token contract (through 2019-05-29). The root cause is a typo in the contract’s constructor name (XBornID vs XBORNID), which allows an attacker to take ownership of the contract and drain cryptocurrency. Documents consistently describe t...

CVE-2019-15078

An issue was discovered in a smart contract implementation for AIRDROPX BORN through 2019-05-29, an Ethereum token. The name of the constructor has a typo wrong case: XBornID versus XBORNID that allows an attacker to change the owner of the contract and obtain cryptocurrency for free...

CVE-2017-14451

An exploitable out-of-bounds read vulnerability exists in libevm Ethereum Virtual Machine of CPP-Ethereum. A specially crafted smart contract code can cause an out-of-bounds read which can subsequently trigger an out-of-bounds write resulting in remote code execution. An attacker can create/send...

Out-of-bounds

An exploitable out-of-bounds read vulnerability exists in libevm Ethereum Virtual Machine of CPP-Ethereum. A specially crafted smart contract code can cause an out-of-bounds read which can subsequently trigger an out-of-bounds write resulting in remote code execution. An attacker can create/send...

CVE-2017-14451

An exploitable out-of-bounds read vulnerability exists in libevm Ethereum Virtual Machine of CPP-Ethereum. A specially crafted smart contract code can cause an out-of-bounds read which can subsequently trigger an out-of-bounds write resulting in remote code execution. An attacker can create/send...

CVE-2017-14451

CVE-2017-14451 is an exploitable out-of-bounds read in libevm (CPP‑Ethereum). The root cause, per TALOS/Red Hat/NVD details, is the pow2N function returning exp[_n] without bounds checks, with exp defined as size 6. The _type parameter (0–255) can drive laneCount/laneWidth to values beyond the ar...

ElevateCoin Digital Error Vulnerability

ElevateCoin is an ethereum-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in ElevateCoin's smart contract implementation. An attacker could use this vulnerability to set the balance of any user to an arbitrary value...

PornCoin Digital Error Vulnerability

PornCoin PRNC is an ethereum-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in PRNC's smart contract implementation. An attacker can exploit the vulnerability to set the balance of any user to an arbitrary value...