EUVD-2018-5532

Malware in sbrugna...

Integer overflow

The mintToken function of a smart contract implementation for CardFactory, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

CVE-2018-13594

The CVE-2018-13594 entry concerns the CardFactory Ethereum token. The mintToken function in its smart contract has an integer overflow, enabling the contract owner to set any user’s balance to an arbitrary value. This is the stated root cause and impact: arbitrary balance modification by the owne...