CVE-2018-14088

An issue was discovered in a smart contract implementation for STeX White List STEWL, an Ethereum token. The contract has an integer overflow. If the owner sets the value of amount to a large number then the "amount 1000000000000000" will cause an integer overflow in withdrawToFounders...

CVE-2018-14085

Summary: CVE-2018-14085 describes a vulnerability in a UserWallet smart contract where an attacker-supplied contract address, when added to the owner’s sweepers, can cause the sweep function to set the sweeperList to a fixed value (0x123456789). This indicates an unauthorized modification of the ...

CVE-2018-14085

An issue was discovered in a smart contract implementation for UserWallet 0x0a7bca9FB7AfF26c6ED8029BB6f0F5D291587c42, an Ethereum token. First, suppose that the owner adds the evil contract address to his sweepers. The evil contract looks like this: contract Exploit uint public start; function...

CVE-2018-14087

An issue was discovered in a smart contract implementation for EUC EUC, an Ethereum token. The contract has an integer overflow. If the owner sets the value of buyPrice to a large number in setPrices then the "msg.value buyPrice" will cause an integer overflow in the fallback function...

CVE-2018-14087

CVE-2018-14087 concerns the EUC Ethereum token smart contract. A root cause is an integer overflow in the fallback function when the owner sets a large buyPrice via setPrices, causing the expression msg.value * buyPrice to overflow. Documents consistently describe this vulnerability in EUC’s cont...

CVE-2018-14088

The CVE-2018-14088 issue affects the STeX White List (STE(WL)) Ethereum token smart contract. A vulnerability in withdrawToFounders() arises from an integer overflow when the owner sets amount to a large value, causing amount * 1000000000000000 to overflow. The available sources confirm the overf...

EPPCOIN Integer Overflow Vulnerability

EPPCOIN EPP is an Ether-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in EPP's smart contract implementation. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...

MKCB Integer Overflow Vulnerability

MKCB is a digital currency as well as Ether. An integer overflow vulnerability exists in the 'sell' function in the smart contract implementation of MKCB. No details of the vulnerability are provided at this time...

MultiGames Integer Overflow Vulnerability

MultiGames MLT is an ethereum-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in the smart contract implementation of MLT. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...

PT-2018-12332

Name of the Vulnerable Software and Affected Versions UserWallet version 0x0a7bca9FB7AfF26c6ED8029BB6f0F5D291587c42 Description An issue was discovered in the smart contract implementation of UserWallet, allowing an evil contract to modify the sweeperList. This can occur when the owner adds the...

PT-2018-12333

Name of the Vulnerable Software and Affected Versions SingaporeCoinOrigin SCO affected versions not specified Description An issue was discovered in the smart contract implementation, where an integer overflow occurs. This happens when the owner sets a large value for sellPrice in the setPrices...

STeX White List Integer Overflow Vulnerability

STeX White List STEWL is an Ether-based digital currency. An integer overflow vulnerability exists in the 'withdrawToFounders' function in the smart contract implementation of STEWL. No detailed vulnerability details are provided at this time...

PT-2018-12334

Name of the Vulnerable Software and Affected Versions EUC EUC smart contract affected versions not specified Description An issue was discovered in the smart contract implementation, where an integer overflow occurs. This happens when the owner sets a large value for buyPrice in the setPrices...

CVE-2018-14088: Integer Overflow or Wraparound

An issue was discovered in a smart contract implementation for STeX White List STEWL, an Ethereum token. The contract has an integer overflow. If the owner sets the value of amount to a large number then the "amount 1000000000000000" will cause an integer overflow in withdrawToFounders...

PT-2018-12336

Name of the Vulnerable Software and Affected Versions Virgo ZodiacToken affected versions not specified Description An issue was discovered in the smart contract implementation for Virgo ZodiacToken, an Ethereum token. The issue arises from the line bool sufficientAllowance = allowance = allows f...

Integer overflow

The increaseApproval function of a smart contract implementation for Tracto TRCT, an Ethereum ERC20 token, has an integer overflow...

CVE-2018-14063

The increaseApproval function of a smart contract implementation for Tracto TRCT, an Ethereum ERC20 token, has an integer overflow...

CVE-2018-14063

The increaseApproval function of a smart contract implementation for Tracto TRCT, an Ethereum ERC20 token, has an integer overflow...

CVE-2018-14063

The CVE-2018-14063 vulnerability affects the Tracto (TRCT) ERC20 smart contract. The increaseApproval function uses an unsafe addition (allowed[msg.sender][_spender] += _addedValue) that can overflow, as shown in the exploitable code snippet. This indicates a root cause: integer overflow in the s...

PT-2018-12315

Name of the Vulnerable Software and Affected Versions Tracto TRCT affected versions not specified Description The issue concerns an integer overflow in the increaseApproval function of a smart contract implementation for Tracto TRCT, an Ethereum ERC20 token. Recommendations At the moment, there i...