212 matches found
Vader functions can be called before initialization in init() of Vader.sol
Handle 0xRajeev Vulnerability details Impact All the external/public functions of Vader.sol can be called by other contracts even before Vader.sol contract is initialized. This can lead to exceptions, state corruption or incorrect accounting in other contracts, which may require redeployment of...
CVE-2021-3006
The breed function in the smart contract implementation for Farm in Seal Finance Seal, an Ethereum token, lacks access control and thus allows price manipulation, as exploited in the wild in December 2020 and January 2021...
ElevateCoin Digital Error Vulnerability
ElevateCoin is an ethereum-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in ElevateCoin's smart contract implementation. An attacker could use this vulnerability to set the balance of any user to an arbitrary value...
Crypto Alley Shares Number Error Vulnerability
Crypto Alley Shares CAST is an Ether-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in CAST's smart contract implementation. An attacker can exploit the vulnerability to set the balance of any user to an arbitrary value...
Pandora Digital Error Vulnerability
Pandora PDX is an ethereum-based digital currency.An integer overflow vulnerability exists in the 'transfer' and 'transferFrom' functions in the smart contract implementation of PDX. An attacker could exploit the vulnerability to set a user's balance to an arbitrary value...
BIGCAdvancedToken Digital Error Vulnerability
BIGCAdvancedToken is an Ether-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in the smart contract implementation of BIGCAdvancedToken. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...
JeansToken Number Error Vulnerability
JeansToken is an ethereum-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in JeansToken's smart contract implementation. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...
Ether Cartel Security Vulnerability
Ether Cartel is a blockchain-based pharmaceutical simulation game. A security vulnerability exists in the 'DrugDealer' function of the smart contract implementation in Ether Cartel. An attacker could use the vulnerability to take control of the contract's ownership and potentially manipulate...
Logic Flaw Vulnerability in HashHeroes Tiles
A security vulnerability exists in the 'determineWinner' function in the smart contract implementation of HashHeroes Tiles, an ethereum-based guessing game. An attacker could exploit this vulnerability to control the awarding of prizes by being the last user to make a purchase...
NewIntelTechMedia License Issues Vulnerabilities
NewIntelTechMedia NETM is a cryptocurrency.A security vulnerability exists in the 'NETM' function in NETM's smart contract implementation, which stems from the fact that the function does not check the identity of the caller. An attacker could use the vulnerability to modify the owner of the smar...
PFGc Number Error Vulnerability
PFGc is an ethereum-based digital currency.An integer overflow vulnerability exists in the smart contract implementation of PFGc in the 'transfer', 'transferFrom', and 'mint ' functions in the PFGc smart contract implementation suffer from an integer overflow vulnerability. An attacker could...
Logic flaw vulnerability in Globalvillage ecosystem
Globalvillage ecosystem GVE is a virtual currency system based on blockchain technology.A security vulnerability exists in the 'approveAndCallcode' function in GVE's smart contract implementation, which stems from the program's failure to validate the callcode. The vulnerability can be exploited ...
SlidebitsToken has a flawed logic vulnerability
SlidebitsToken is an Ether-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in SlidebitsToken's smart contract implementation. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...
hentaisolo has a flawed logic vulnerability
hentaisolo HAO is an ethereum-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in HAO's smart contract implementation. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...
Logic Flaw Vulnerability in CIBN Live Token
CIBN Live Token CIBN LIVE is an Ether-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in the smart contract implementation of CIBN LIVE. An attacker could use this vulnerability to set the balance of any user to an arbitrary value...
DDQ override vulnerability
DDQ is a cryptocurrency. A security vulnerability in the 'owned' function in DDQ's smart contract implementation stems from the function's failure to check the identity of the caller. An attacker could use the vulnerability to modify the owner of a smart contract...
CVE-2018-17987
The determineWinner function of a smart contract implementation for HashHeroes Tiles, an Ethereum game, uses a certain blockhash value in an attempt to generate a random number for the case where NUMTILES equals the number of people who purchased a tile, which allows an attacker to control the...
Code injection
A lottery smart contract implementation for Greedy 599, an Ethereum gambling game, generates a random value that is predictable via an external contract call. The developer used the extcodesize function to prevent a malicious contract from being called, but the attacker can bypass it by writing t...
SpeedCashLite Integer Overflow Vulnerability
SpeedCashLite SCSL is an Ether-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in the smart contract implementation of SCSL. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...
Cavecoin Digital Error Vulnerability
Cavecoin is an Ether-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in Cavecoin's smart contract implementation. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...