CVE-2018-13221

The sell function of a smart contract implementation for Extreme Coin XT Contract Name: ExtremeToken, an Ethereum token, has an integer overflow in which "amount sellPrice" can be zero, consequently reducing a seller's assets...

Integer overflow

The mintToken function of a smart contract implementation for Snoqualmie Coin SNOW, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

CVE-2018-13217

The sell function of a smart contract implementation for CoinToken, an Ethereum token, has an integer overflow in which "amount sellPrice" can be zero, consequently reducing a seller's assets...

Integer overflow

The sell function of a smart contract implementation for Extreme Coin XT Contract Name: ExtremeToken, an Ethereum token, has an integer overflow in which "amount sellPrice" can be zero, consequently reducing a seller's assets...

Integer overflow

The mintToken function of a smart contract implementation for Super Carbon Coin SCC, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

CVE-2018-13221

The CVE-2018-13221 entry concerns Extreme Token (Extreme Coin XT) on Ethereum, where the sell function of the ExtremeToken contract suffers an integer overflow in the calculation amount * sellPrice, which can evaluate to zero and thereby reduce a seller’s assets. The affected component is the sma...

CVE-2018-13170

The CVE-2018-13170 entry covers the mintToken function in a Snoqualmie Coin (SNOW) Ethereum token smart contract. A concrete vulnerability is an integer overflow in mintToken that enables the contract owner to illegitimately set any user’s balance to a chosen value. Documents consistently describ...

CVE-2018-13170

The mintToken function of a smart contract implementation for Snoqualmie Coin SNOW, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

CVE-2018-13194

The mintToken function of a smart contract implementation for TongTong Coin TTCoin, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

CVE-2018-13191

The CVE-2018-13191 entry concerns the mintToken function of the Super Carbon Coin (SCC) Ethereum token smart contract. A integer overflow in mintToken allows the contract owner to set an arbitrary user’s balance to any value, effectively corrupting token accounting and granting the owner unauthor...

CVE-2018-13180

CVE-2018-13180 affects the IMM Coin (IMC) Ethereum token. The mintToken function contains an integer overflow that lets the contract owner set any user’s balance to an arbitrary value, compromising balances and token integrity. The documents do not provide exploitation status or official remediat...

CVE-2018-13180

The mintToken function of a smart contract implementation for IMM Coin IMC, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

CVE-2018-13191

The mintToken function of a smart contract implementation for Super Carbon Coin SCC, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

Obfuscated Coinhive shortlink reveals larger mining operation

During the past several months, in-browser mining has continued to affect a large number of websites, predominantly relying on Coinhive's infamous API. We documented several campaigns on this blog, in particular Drupalgeddon, where attackers are taking advantage of vulnerabilities in popular...

CVE-2018-13075

The mintToken function of a smart contract implementation for Carbon Exchange Coin Token CEC, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

CVE-2018-13086

The mintToken function of a smart contract implementation for IADOWR Coin IAD, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

Integer overflow

The mintToken function of a smart contract implementation for Universal Coin UCOIN, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

Integer overflow

The mintToken function of a smart contract implementation for Good Time Coin GTY, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

Integer overflow

The mintToken function of a smart contract implementation for Carbon Exchange Coin Token CEC, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

Integer overflow

The mintToken function of a smart contract implementation for IADOWR Coin IAD, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...