EUVD-2018-4912

Malware in sbrugna...

Pool: approveAndCall sets unnecessary approval

Handle cmichel Vulnerability details Vulnerability Details The Pool.approveAndCall function approves the recipient contract with the max value instead of only the required amount. Impact For safety, the approval should not be set to the max value, especially if the amount that the contract may us...

Synth: approveAndCall sets unnecessary approval

Handle cmichel Vulnerability details Vulnerability Details The Synth.approveAndCall function approves the recipient contract with the max value instead of only the required amount. Impact For safety, the approval should not be set to the max value, especially if the amount that the contract may u...

Aditus Security Vulnerabilities

Aditus ADI is an ethereum-based digital currency.A security vulnerability exists in the 'approveAndCall' function in ADI's smart contract implementation. The vulnerability can be exploited by an attacker to steal assets e.g., transfer all contract balances to the attacker's account...

CVE-2018-12959

The CVE-2018-12959 entry concerns the approveAndCall function of a smart contract implementation for Aditus (ADI), an Ethereum ERC20 token. The description states that this function allows attackers to steal assets (e.g., transfer all contract balances into their account). The connected documents...

CVE-2018-12959

The approveAndCall function of a smart contract implementation for Aditus ADI, an Ethereum ERC20 token, allows attackers to steal assets e.g., transfer all contract balances into their account...

PT-2018-11502

Name of the Vulnerable Software and Affected Versions Aditus ADI affected versions not specified Description The issue concerns the approveAndCall function of a smart contract implementation, which allows attackers to steal assets by transferring all contract balances into their account...

CVE-2018-12959: Improper Input Validation

The approveAndCall function of a smart contract implementation for Aditus ADI, an Ethereum ERC20 token, allows attackers to steal assets e.g., transfer all contract balances into their account...

PT-2018-11342

Name of the Vulnerable Software and Affected Versions Block 18 18T smart contract implementation affected versions not specified Description The issue concerns the approveAndCall function in a smart contract implementation, which allows attackers to steal assets by transferring the contract's...

PT-2018-11341

Name of the Vulnerable Software and Affected Versions Globalvillage ecosystem GVE smart contract implementation affected versions not specified Description The issue concerns the approveAndCall function in the smart contract implementation, which allows attackers to steal assets by transferring t...