IADOWR Coin Integer Overflow Vulnerability

IADOWR Coin IAD is a tradable Ether ERC20 token. An integer overflow vulnerability exists in the mintToken function of IADOWR Coin's smart contract implementation. The vulnerability can be exploited by the contract owner to set the balance of any user to any value...

Universal Coin Integer Overflow Vulnerability

Universal Coin UCOIN is a tradable Ether ERC20 token. An integer overflow vulnerability exists in the mintToken function of Universal Coin's smart contract implementation. The vulnerability can be exploited by the contract owner to set the balance of any user to any value...

Good Time Coin Integer Overflow Vulnerability

Good Time Coin GTY is a tradable Ether ERC20 token. An integer overflow vulnerability exists in the mintToken function of Good Time Coin's smart contract implementation. The vulnerability can be exploited by the contract owner to set the balance of any user to any value...

CVE-2018-13084

CVE-2018-13084 concerns Good Time Coin (GTY) ERC20 token. The vulnerability resides in the mintToken function of GTY’s smart contract, where an integer overflow can enable the contract owner to set the balance of any arbitrary user to a chosen value. This description is consistent across multiple...

CVE-2018-13086

The mintToken function of a smart contract implementation for IADOWR Coin IAD, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

CVE-2018-13086

The CVE-2018-13086 entry concerns IADOWR Coin (IAD), an Ethereum ERC20 token. The mintToken function in its smart contract has an integer overflow that allows the contract owner to set any user’s balance to an arbitrary value. Practical impact described is misappropriation of balances by the owne...

CVE-2018-13075

The mintToken function of a smart contract implementation for Carbon Exchange Coin Token CEC, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

CVE-2018-13089

The mintToken function of a smart contract implementation for Universal Coin UCOIN, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

CVE-2018-12068

The sell function of a smart contract implementation for Target Coin TGT, a tradable Ethereum ERC20 token, allows a potential trap that could be used to cause financial damage to the seller, because of overflow of the multiplication of its argument amount and a manipulable variable sellPrice, aka...

CVE-2018-12081

The mintToken function of a smart contract implementation for Target Coin TGT, a tradable Ethereum ERC20 token, has no period constraint, which allows the owner to increase the total supply of the digital assets arbitrarily so as to make profits, aka the "tradeTrap" issue...

Design/Logic Flaw

The sell function of a smart contract implementation for Target Coin TGT, a tradable Ethereum ERC20 token, allows a potential trap that could be used to cause financial damage to the seller, because of overflow of the multiplication of its argument amount and a manipulable variable sellPrice, aka...

CVE-2018-12081

CVE-2018-12081 affects the Target Coin (TGT) ERC20 token. The mintToken function has no period constraint, allowing the owner to arbitrarily increase total supply, enabling profit via inflation of assets. The vulnerability is defined in the NVD description and corroborated by multiple feeds; no e...

CVE-2018-12068

The sell function of a smart contract implementation for Target Coin TGT, a tradable Ethereum ERC20 token, allows a potential trap that could be used to cause financial damage to the seller, because of overflow of the multiplication of its argument amount and a manipulable variable sellPrice, aka...

CVE-2018-12068

The CVE-2018-12068 issue concerns a math overflow in the sell() function of the Target Coin (TGT) ERC20 contract. The vulnerability arises from overflow in multiplying the argument amount by a manipulable sellPrice, enabling a potential trap (tradeTrap) that could cause financial damage to the se...

Soar Labs Soar Coin Design Vulnerability

Soar Labs Soar Coin is an ethereum-based virtual cryptocurrency. A security vulnerability exists in the 'zerofeetransaction' function in Soar Labs Soar Coin git commit 4a2aa71ee21014e2880a3f7aad11091ed6ad434f and previous versions. An attacker could exploit this vulnerability to steal Soar curren...

Machine learning vs. social engineering

Machine learning is a key driver in the constant evolution of security technologies at Microsoft. Machine learning allows Microsoft 365 to scale next-gen protection capabilities and enhance cloud-based, real-time blocking of new and unknown threats. Just in the last few months, machine learning h...

Design/Logic Flaw

Soar Labs Soar Coin version up to and including git commit 4a2aa71ee21014e2880a3f7aad11091ed6ad434f latest release as of Sept 2017 contains an intentional backdoor vulnerability in the function zerofeetransaction that can result in theft of Soar Coins by the "onlycentralAccount" Soar Labs after...

CVE-2018-1000203

The CVE-2018-1000203 entry concerns Soar Labs Soar Coin, where versions up to git commit 4a2aa71ee21014e2880a3f7aad11091ed6ad434f (latest as of Sept 2017) contain an intentional backdoor in zero_fee_transaction() that can enable theft of Soar Coin by the account labeled "onlycentralAccount" after...

CVE-2018-1000203

Soar Labs Soar Coin version up to and including git commit 4a2aa71ee21014e2880a3f7aad11091ed6ad434f latest release as of Sept 2017 contains an intentional backdoor vulnerability in the function zerofeetransaction that can result in theft of Soar Coins by the "onlycentralAccount" Soar Labs after...

Unspecified vulnerability in ROC 'request_divend' function

ROC aka Rasputin Online Coin is a virtual currency. There is a security vulnerability in the 'requestdivend' function in ROC's smart contract implementation. An attacker could use this vulnerability to steal the entire contract's Ether...