Lucene search
+L

28 matches found

Github Security Blog
Github Security Blog
added 2026/08/28 10:08 p.m.11 views

klever-go: SFT add-quantity `int64` overflow bypasses a finite per-nonce MaxSupply

Summary On the SFT add-quantity path the only supply bound is SFTAddCirculation, which does meta.Circulation += amount with no overflow guard, then checks if meta.Circulation meta.MaxSupply && meta.MaxSupply != 0. If amount overflows int64 and wraps negative, negative MaxSupply is false, the cap...

8.7CVSS5.9AI score0.00323EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder