CVE-2018-13511

The CVE-2018-13511 entry concerns CorelliCoin, an Ethereum token. The issue is an integer overflow in the smart contract’s mintToken function that allows the contract owner to set any user’s balance to an arbitrary value. The vulnerability is described as affecting CorelliCoin’s token implementat...

CVE-2018-13502

CVE-2018-13502 affects a HeliumNetwork smart contract (Ethereum token). The mintToken function has an integer overflow that allows the contract owner to set any user’s balance to an arbitrary value. This is documented in NVD as the root cause and impact (integrity manipulation, high impact per CV...

CVE-2018-13471

The CVE-2018-13471 entry concerns BeyondCashToken, an Ethereum token. The issue is in the mintToken function of the smart contract where an integer overflow can permit the contract owner to set any user’s balance to an arbitrary value. Multiple connected records (CNVD-2018-13026, NVD/NVD CVE-2018...

CVE-2018-13573

The mintToken function of a smart contract implementation for TripPay, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

CVE-2018-13508

The CVE concerns the mintToken function in a VITToken Ethereum smart contract. The vulnerability is an integer overflow in mintToken that allows the contract owner to set any user’s balance to an arbitrary value. Connected documents confirm the affected component (mintToken in VITToken) and the r...

Bugged Smart Contract FuturXE: How Could Someone Mess up with Boolean? (CVE-2018–12025)

Recently SECBIT team found a serious bug about the if condition in a deployed ERC20 smart contract called FuturXE FXE and here is the bugged part: //Function for transer the coin from one address to another function transferFromaddress from, address to, uint value returns bool success //checking...

Aurora IDEX Membership(IDXM), ERC20 Token, allows attackers to acquire contract ownership (CVE-2018–10666)

Abstract I found a new vulnerability in smart contract of IDXM Token CVE-2018–106661. Attackers can acquire contract ownership because the setOwner function is delcared as public. A new owner can subsequently bypass intended access restrictions by, for example, calling uploadBalances. Details In...

New ceoAnyone Bug Identified in Multiple Crypto Game Smart Contracts (CVE-2018-11329)

Our vulnerability-scanning system at PeckShield has so far discovered several dangerous smart contract vulnerabilities batchOverflow1, proxyOverflow2, transferFlaw3, ownerAnyone4, multiOverflow5, burnOverflow6. These vulnerabilities typically affect various tokens that may be publicly traded in...

Attackers can steal all of Ether in ROC (Rasputin Online Coin) token smart contract (CVE-2018–10944)

Abstract I found a vulnerability of a smart contract for ROC aka Rasputin Online Coin, an Ethereum ERC20 token CVE-2018–109441. The requestdividend function has a critical bug similar to Reentrancy attack. Attackers can call the function in multiple times to steal Ether constantly until all of th...

erc20 contract KoreaShow bug(CVE-2018-10973)

An integer overflow in the transferMulti function of a smart contract implementation for KoreaShow, an Ethereum ERC20 token, allows attackers to accomplish an unauthorized increase of digital assets via crafted value parameters. Lets see where this issue is: function transferMultiaddress to,...

Ethereum Cash Pro Digital Error Vulnerability

Ethereum Cash Pro ECP is an Ether-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in ECP's smart contract implementation. An attacker can exploit the vulnerability to set the balance of any user to an arbitrary value...

AthletiCoin Digital Error Vulnerability

AthletiCoin ATHA is an Ether-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in ATHA's smart contract implementation. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...

JustDCoin Digital Error Vulnerability

JustDCoin JustD is an Ether-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in JustD's smart contract implementation. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...

AssetToken Number Error Vulnerability

AssetToken is an Ether-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in AssetToken's smart contract implementation. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...

bankcoin integer overflow vulnerability

bankcoin BNK is an ethereum-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in BNK's smart contract implementation. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...

BonusToken Integer Overflow Vulnerability

bonusToken BNS is an Ether-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in the smart contract implementation of BNS. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...

Yu Gi Oh Number Error Vulnerability

Yu Gi Oh YGO is an Ether-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in the smart contract implementation of YGO. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...

etktokens integer overflow vulnerability

etktokens ETK is an ethereum-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in the smart contract implementation of ETK. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...

CVE-2018-13328

The transfer, transferFrom, and mint functions of a smart contract implementation for PFGc, an Ethereum token, have an integer overflow...

Integer overflow

DISPUTED The transfer and transferFrom functions of a smart contract implementation for Bittelux BTX, an Ethereum token, have an integer overflow. NOTE: this has been disputed by a third party...